Information security management handbook - Tipton, Harold F. (Washinhton Auerbach, 2000)