Stephen D. Fried: Establishing an E-Mail Retention Policy. Information Security Management Handbook, 6th ed. 2007: 415-426