1. Information Systems Audit and Control Foundation (ISACF). (2000). Control objectives for information and related technology (3rd ed.). Rolling Meadows, IL: Author.
2. Information Systems Audit and Control Foundation (ISACF). (2003). IT control objectives for Sarbanes-Oxley.
3. Retrieved March 4, 2004, from www.deloitte.com/dtt/cda/doc/content/IT_Controls_%20Sarbanes-Oxley%281%29.pdf
4. (1999). Constructing useful use cases (Managing requirements?Part 3).