Information security: design, implementation, measurement, and compliance - Layton, Timothy P . (Auerbach, 2007)