Information technology. Security techniques. A framework for IT security assurance. Analysis of assurance methods Part 3, (31st January 2008)