1. Racz, N., Weippl, E., Seufert, A.: A process model for integrated IT governance, risk, and compliance management databases and information systems. In: Proceedings of the Ninth International Baltic Conference, Baltic DB&IS 2010, pp. 155–170. University of Latvia Press, Riga (2010)
2. Kooper, M.N., Maes, R., Roos Lindgreen, E.E.O.: On the governance of information: introducing a new concept of governance to support the management of information. International Journal of Information Management: The Journal for Information Professionals 31(3), 195–200 (2011)
3. Racz, N., Panitz, J.C., Amberg, M., Weippl, E., Seufert, A.: Governance, risk & compliance (GRC) status quo and software use: results from a survey among large enterprises. In: ACIS 2010 Proceedings, paper 21 (2010).
http://aisel.aisnet.org/acis2010/21
(retrieved 13 December 2010)
4. Stachtchenko, P.: COBIT 5, ses apports pour management et la gouvernance du SI, Janvier 25, 2013
5. Delbrayelle, Introduction à ITIL V3 et au cycle de vie des services, juillet 2011. ISO office, Information technology— Security techniques— Code of practice for information security management (2005)