1. Business Model for Information Security;BMIS,2010
2. Body of Knowledge for the CISM Examination;CISM Bok,2010
3. CobiT 4.1, IT Governance and assurance framework, ISACA, www.isaca.org/ COBIT
4. Drew and Nair, Payment card Industry data security standard in the Real World, www.isaca.org
5. Gary Palgron, Reducing PCI DSS audit scope by, www.theiia.org