N. Epp, J. Pentikis, and S. Roohani, “The Sunk Costs of Cybersecurity Testing: Who Bears Responsibility?”, JABE, vol. 26, no. 2, Jun. 2024.