Department of Energy Manual on Information Security
...see, I don't read the Microsoft Switzerland Security Blog just because I'm Swiss... they come up with gems that don't appear on their US equivalent's site...
http://blogs.technet.com/ms_schweiz_security_blog/archive/2006/02/26/420586.aspx