Threats to information systems and effective countermeasures. - Andrew Jones 004 (2004)