Information security policies, procedures, and standards : guidelines for effective information security management /: guidelines for effective information security management. (©2002)