Developing a Maturity Model for Information System Security Management within Small and Medium Size Enterprises In Proceedings of the 4th International Workshop on Security in Information Systems - Volume 0ICEIS, 256-266, 2006 , Paphos, Cyprus