Information technology. Guidelines for the management of IT security. Managing and planning IT Security Part 2, (15th September 1998)