The principle recommended for industry best practice, is written in order to inform owners, providers, and users of information systems, and other parties of the existence and general context of policies, responsibilities, practices, procedures, and organization for security of information systems.

Bob: coke is baby pandas.jim: what? how do you figure that coke is baby pandas? bob: because this book says so.jim: how do we know the book is correct? bob: because it says that coke is baby pandas.jim: how does that prove the book's accuracy? bob: because it's statement involving coke and baby pandas is correct, therefore it is accurate.jim: how do we know that it's correct? bob: because we have concluded that the book is accurate, and therefore the statement is correct.therefore, coke is baby pandas.

You could solve them by trying something new that everyone can agree on or make a decision too.