Towards requirements for third-party assessments in the Specific Operations Risk Assessment process | IEEE Conference Publication | IEEE Xplore