1. BS-7799-2:2002. Information security management systems – specification with guidance for use. British Standards Institute.
2. BS ISO/IEC17799:2000, BS-7799-1:2000. Information technology – code of practice for information security management. British Standards Institute.
3. COBIT. 3rd ed. Framework July 2000. ISACA.
4. ISO/IEC-27001:2005. Information technology – security techniques – information security management systems – requirements.