...part 2, NIST publications, COBIT, ISO TR 13335 (GMITS) and the forthcoming GAISP (formerly GASSP). 1 PrivacyInternational’s “Stupid Security” awards provide many examples. See http://www.privacyinternational.org/activities...
http://www.secoda.com/secodawhitepaper0403.pdf