Very comprehensive manual on drawing up IT security guidelines for low-to-medium security requirements. The manual can be purchased from the Bundesanzeigerverlag (German Federal Gazette Publishers).