IT auditing : using controls to protect information assets - SCHILLER (McGraw-Hill, 2011)