Information technology. Security techniques. A framework for IT security assurance - Analysis of assurance methods