Standard for auditing computer applications - Martin A Krist (CRC Press, 2000)