Factor analysis of information risk - Wikipedia