1. British Standards (2000a), BS7799: 1 Information Technology: Code of Practice for Information Security Management, British Standards, London.
2. British Standards (2000b), BS7799: 2 Information Security Management: Specification for Information Security Management System, British Standards, London.
3. BSI (2000), IT Baseline Protection Manual, Federal Agency for Security in Information Technology, Bonn, available at: www.bsi.de/english/
4. Defence Signals Directorate (2000), Australian Communications‐Electronic Security Instruction 33 (ACSI), Defence Signals Directorate, available at: www.dsd.gov.au/infosec/acsi33/acsi_index.html
5. Henze, D. (2000), IT‐baseline Protection Manual, BSI, Federal Agency for Security in Information Technology, Bonn.