Stan Stahl, Robert Braun: An Emerging Information Security Minimum Standard of Due Care. Information Security Management Handbook, 6th ed. 2007: 2725-2744