19/159Syngress-TechnoSecurity’sGuidetoManagingRisksforITManagers,Auditors,andInvestigators-2007