IT Audit, Control, and SecurityPublished Online: 5 JAN 2012