L. B. Hadden, D. R. Hermanson, and F. T. DeZoort, “Audit Committees Oversight Of Information Technology Risk”, RBIS, vol. 7, no. 4, pp. 1–12, Oct. 2003.