IT Auditing : Using Controls To Protect Information Assets - Mike Schiller (McGraw Hill)