Information security management. Code of practice for information security management systems Part 1, (15th February 1995)