Information security management principles - Taylor, Andy (BCS, the Chartered Institute for IT,, 2013)