Standard for auditing computer applications - Krist Martin A (2000)