Coming to terms with security : a handbook on verification and compliance (UNIDIR, 2003)