Information security : polocies and implementation issues - NIIT (NIIT, New Delhi, 2004)