It Auditing Using Controls To Protect Information Assets by Mike Schiller & Chris Davis