1. Manegerial economics and organization;Acs,1996
2. It doesn't matter;Carr;Harvard Business Review,2003
3. Qualitative inquiry and research design: choosing among five traditions;Creswell,1998
4. Information security management: an approach to combine process certification and product evaluation;Eloff;Computers & Security,2000
5. ISO/IEC 27002: code of practice for information security management;International Standards Organization,2005