INTRODUCTION THENEEDTOASSESSSECURITYCONTROLEFFECTIVENESSININFORMATIONSYSTEMS TToday’sinformationsystems9arecomplexassemblagesoftechnology(i.e.,hardware, software,andfirmware),processes,andpeople,workingtogethertoprovideorganizations withthecapabilitytoprocess,s