It Auditing using controls to protect information assets - Davis, Chris (McGraw-Hill, 2007)