Information security policies made easy - Wood, Charles Cresson (InfoSecurity Infrastructure, 2001)