Abduljalil, S. & Abdulhamid, R. (2005 & 2007). ISMS Pilot Program Experiences: Benefits, Challenges & Recommendations. 2013, from http://cybersecurity. my/data/content_files/11/23.pdf.
Al-Awadi, M. & Renaud, K. (2007). Success factors in information security implementation in organizations. Paper presented at the IADIS International Conference e-Society 2007, Available in: http://www.dcs.gla.ac.uk /~karen/ Papers/sucessFactors2.pdf.
Choi, N., Kim, D. & Goo, J. (2008). Knowing is doing: An empirical validation of the relationship between managerial information security awareness and action. Information Management & Computer Security, 16 (5): 484-485.
Fomin, V., DeVries, H., Barlette, Y. (2008). ISO/IEC 27001 Information systems security management standards: Exploring the reasons for low adoption. RSM Erasmus University, Netherland.
Kakkar, A., Punhani, R. & Madan, S. (2012). Implementation of ISMS and its Practical Shortcomings. International Refereed Research Journal ISSN 1839-6518,Vol. 02, No. 01, www.irj.iars.info.
Kazemi, M., Khajouei, H. & Nasrabadi, H. (2012). Evaluation of information security management system success factors: Case study of Municipal organization. African Journal of Business Management, 6(14): 4982-4989.
Khorasani Rad, A., Hossein Abadi, H. & Amirzadeh, R. (1996). Standard ISO / IEC 27001:2005. Partner company Tuff Iran (Member of TUV Nord), Tehran.
Ku, C., chang, Y., Yen, D. (2009). National information security policy and its implementation: A case study in Taiwan. Telecommunications Policy, 33 (7): 371-384.
Kwok, L. & Longley, D. (1999). Information security management and modeling. Information Management & Computer Security, 7 (1): 30-40.
Mivald, A. (2004). Computer network security, Translated by Seyyed Ahmad Safai, The first edition, Daneshparvar, Tehran. (in Persian)
Mohseni, M. (2013). Has your organization compliance with ISMS? A case study in an Iranian Bank. arXiv preprint arXiv:1303.0468. from Http://arxiv.org/ ftp/arxiv/papers/1303/1303.0468.pdf.
Sadr-Ameli, F., Tork Ladany, B. & Farahi, A. (2009). Challenges and succes factors for implementation of Information Security Management System (ISMS) in Iran a by hierarchical analysis method (AHP). Sixth International Conference on Management of Information and Communication Technology, Tehran, Institute of Management Technology, http://www.civilica.com/ Paper-ICTM06-ICTM06_142.html. (in Persian)
Siponen, M. & Willison, R. (2009). Information security management standards: Problems and solutions. Information & Management, 46 (5): 267-270.
Taheri, M. (2009). Provide a framework for the role of human factors in information systems security. MA thesis, Tarbiat Modarres University, Faculty of Humanities. (in Persian)