Aftab Ahmad Tobias Ruighaver A Top-Down Approach Towards Translating Organizational Security Policy Directives to System Audit Configuration. 55-66 2002 conf/sec/2002 SEC db/conf/sec/sec2002.html#AhmadR02