Abstract Reviews the book "Information Security: Strategies for Successful Management," by S.J. Gaston.
Gavin et al. (Sat,) studied this question.