Controls, Procedures and Risk - David Loader (ELSEVIER, 2002)