Lapkeand Dhillon. A Semantic Analysis of Security Policy Formulation and Implementation: A Case Study. 2006.