Harold F. Tipton: Types of Information Security Controls. Information Security Management Handbook, 6th ed. 2007: 1357