Management of information security - Whitman (Thomson Course Technology, 2004)