The University of SydneyPage 52References–Principles of Information Security Systems –Texts and Cases –Gurpreet Dhillon–Chapter 7 : Planning for Information Systems Security–Chapter 8 : Designing Information Systems Security–Information technology —Security techniques —Systems Security Engineering —Capability Maturity Model® (SSE-CMM®)–https://www.iso.org/standard/44716.html