OK, a blatant plug for a commercial product, but I think that we know how to parse anything useful...............and it looks cool to the non-cognoscenti ;)........ "SAP sez"?
http://infosyssec-whitepapers.tradep...ree/w_sapx140/
:)
EDIT:
Obviously SAP mostly market a large ERP product, but there are general principles involved that apply to small and medium enterprises as well.