Mariki M. Eloff, Sebastiaan H. von Solms: Information Security Management: An Approach to Combine Process Certification And Product Evaluation. Comput. Secur. 19(8): 698-709 (2000)