Improving Information Systems Security Through Management Practices: A Non-technical Approach. - Karen D. Nard (2004)