cobit security baseline/Implementation Guide/cobit-focus http://bbs.cncisa.org/read.php?tid-9663-fpage-6.html