Wade H. Baker, Linda Wallace, "Is Information Security Under Control?: Investigating Quality in Information Security Management", IEEE Security & Privacy vol. 5 no. , p. 36-44, , 2007