Jeffrey Davis: Belts and Suspenders. Information Security Management Handbook, 6th ed. 2007: 95-104