How to achieve 27001 certification : an example of applied compliance management - Arnason, Sigurjon Thor (Auerbach Publications, 2008)