Executive Guide to the Protection of Information Resources: A US National Institute of Standards and Technology publication.
You can download it from the following link: https://packetstormsecurity.com/files/download/16105/exeguide.txt
Source: https://packetstormsecurity.com/files/16105/exeguide.txt.html