It Auditing Using Controls to Protect Information Assets, 2nd Edition by Mike Schiller & Chris Davis