Federal Reserve Bank of New York, Sound Practices Guidance on Information Security (Sept. 1997) (full-text).