The information systems security officer's guide establishing and managing an information protection program - Kovacich Gerald L. (Elsevier Butterworth-Heinemann, 2003)