Describir: Security and control in information systems :