Information security policies, procedures, and standards : guidelines for effective information security management - Peltier, Thomas R. (Auerbach, 2002)