German Federal Office for Information Security (2003), 'IT Baseline Protection Manual' , http://www.bsi.de/gshb/ .