Information technology. Security techniques. A framework for IT security assurance. Overview and framework Part 1, (7th March 2005)