Brinks modern internal auditing : a common body of knowledge
COSO enterprise risk management : establishing effective governance, risk, and compliance processes
IT audit, control and security
It audit, control, and scurity