ISO/IEC17799 : 2005 Replaced with ISO/IEC27002 : 2005 Information technology. Security techniques. Code of practice for information security management