IT audit, control and security
Cyber risk management : prioritize threats, identify vulnerabilities and apply controls
Computer security a management audit approach