Towards Improved Security Management Practice by Marko Nordquist