McGraw-Hill Publishing Company IT Auditing Using Controls to Protect Information Assets