Luis Enrique Sánchez, Daniel Villafranca, Eduardo Fernández-Medina, Mario Piattini: Developing a Model and a Tool to Manage the Information Security in Small and Medium Enterprises. SECRYPT 2007: 355-362