hi, this is my first post on AO, so i hope it makes sense!

i would also recommend checking NIST publications. They have tons of security documents posted on their website and i'm sure some it could be of help to you.

here is the link to most of the publications: http://csrc.nist.gov/publications/nistpubs/index.html

additionnaly, you can request out of print publications to be mailed to you by snail mail.

hope this helps.

all the best,
banshee