Sean M. Price: Developing and Conducting a Security Test and Evaluation. Information Security Management Handbook, 6th ed. 2007: 259-260