Mignona Cote: Committee of Sponsoring Organizations (COSO). Information Security Management Handbook, 6th ed. 2007: 355-366