IT auditing : using controls to protect information assets [ - Davis, Chris [ (Christopher Michael)]; Schiller, Mike; Wheeler, Kevin (McGraw-Hill, 2011)