German Federal Office for Information Security (2003). IT Baseline Protection Manual http://www.bsi.de/gshb/ .