CISA review manual 2010
Information Systems Audit and Control Association
CISA review manual 2011
IT control objectives for Sarbanes-Oxley