The Development of Access Control Policies for Information Technology Systems. - Peter Ward; Clifton L. Smith (Comput. Secur., 2002)