A. Barbosa Martins and C. A. Saibel Santos, “A Methodology to Implement an Information Security Management System”, JISTEM USP, vol. 2, no. 2, pp. p. 121–136, Nov. 2006.