Information security policies and procedures : a practitioner's reference /: a practitioner's reference. (©2004)