Generally accepted principles and practices for securing information technology systems - Swanson, Marianne (National Institute of Standards and Technology, Technology Administration, U.S. Dept. of Commerce, 1996)