Rebecca Herold: Building an Effective Privacy Program. Information Security Management Handbook, 6th ed. 2007: 401-414