Herbert Mattord and Michael Whitman. "Regulatory Compliance in Information Technology and Information Security" (2007)
Available at: http://works.bepress.com/herbert_mattord/1/