Information security management handbook - Krause, Micki (Auerbach Pub., 2004)