It Auditing: Using Controls to Protect Information Assets [IT AUDITING -OS N/D]