Enterprise Information Systems Assurance and System Security by