https://www.giac.org/paper/g2700/21/implementing-iso-17799-isms-information-security-management-system-dre-direct-recording-electronic-election-management-system/104972