ISO 27001/ISO 27002: A guide to information security management systems - Publishing (IEEE, 2003)