Guidelines for Effective Information Security Management - Thomas R. Peltier (Taylor and Francis, 2001)