INFORMATION SECURITY - STRAUB, D.W AND OTHERS (PHI, 2009)