Information system infrastructure planning-threshold setting based on risk analysis | IEEE Conference Publication | IEEE Xplore