How to achieve 27001 certification: an example of applied compliance management - Arnason, Sigurjon Thor; Willet, Keith D (CRC Press, 2008)