Securing an IT organization through governance, risk management, and audit - Sigler, Kenneth E.; Rainey, James L. (CRC Press, 2016)