1. Carnegie Mellon Software Engineering Institute, OCATVE Criteria, Version 2.0
2. BSI, BS7799 - Code of Practice for Information Security Management, British Standards Institute (1999)
3. General Accounting Office, Information Security Risk Assessment - Practices of Leading Organizations, Exposure Draft, U.S. General Accounting Office (August 1999)
4. ISO/IEC JTC 1/SC27,Information technology - Security technique - Guidelines for the management of IT security (GMITS) - Part 3: Techniques for the management of IT security, ISO/IEC JTC1/SC27 N1845, 12. 1 (1997)
5. Solm, R.: Information Security Management (2): Guidelines to The Management of Information Technology Security (GMITS). Information Management & Computer Security 6(5), 221–223 (1998); 11–21 (1999)