Information security policy, processes, and practices - Straub, Detmar W.; Goodman, Seymour E.; Baskerville, Richard. (Advances in management information systems., 2008)