Seol mar théacs é seo: It Auditing using controls to protect information assets