ISO/IEC 27002:2005: Information Technology - Security Techniques - Code of Practice for Information Security Management (2005) (full-text).