Information Security Policies, Procedures, and Standards - nidottu, Englanti, 2001