IT AUDITING : USING CONTROLS TO PROTECT INFORMATION ASSETS
COMPUTER SECURITY: PRINCIPLES AND PRACTICE