Information security management. Code of practice for information security management Part 1, (15th May 1999)