A conceptual foundation for organizational information security awareness (2000, background): “…theories) with respect to the uses of security systems has been recognised (e.g. by NIST, 1998; Parker, 1998; Baskerville, 1989; Spruit, 1998; SSE-CMM, 1998a; 1998b; Straub, 1990; Straub et al., 1992; Thomson and von Solms, 1998; Warman, 1992) – but only on an abstract level (as seen in…”
Information security management standards: Problems and solutions (2009, methodology): “Organization-oriented security standards include GMITS, BS7799 (1993, 1999), the OECD guidelines, GASSP (1999) and the System Security Engineering Capability Maturity Model (SSE-CMM 1998a,b).”