Patricia A. P. Fisher: Operations Security and Controls. Information Security Management Handbook, 6th ed. 2007: 2629-2639