Was surprised to see so many books on this (although in hindsight with Sarbanes-Oxley it would be predictable). The drive to audit and control IT can only assist in the goals espoused by this weblog.
Auditing Information Systems, by Jack Champlain (2003)
Information Systems Control and Audit by Ron A. Weber (1998)
Core Concepts of Information Technology Auditing by James Hunton et al (2003)
and so on (you can see related titles on Amazon).
