~ tracking down this book ~
IT Control Objectives for Sarbanes-Oxley by IT Governance Institute — OmList