Information security management handbook - Tipton; Krause (Auerbach Publications, 2007)