Regulating Information Security: A Matter of Principle? - Andreas Mitrakas; Silvia Portesi (ISSE, 2007)