Abstract Reviews the book "Audit and Control of Information Systems," by Frederick Gallegos, Dana R. Richardson and A. Faye Borthick.
Richard S. Savich (Tue,) studied this question.