Analysis of Information Security Risks: Policy for Protection Through to Implementation. - Kay Hughes; Simon R. Wiseman (ECIW, 2005)