Auditing the IT environment : assessing and measuring risk and control - Chambers, Andrew (Pitman, 1994)