Implementing the ISO/IEC 17799 standard in practice - findings from small and medium sized software organisations | IEEE Conference Publication | IEEE Xplore