CISA review questions, answers & explanations manual 2008 (Information Systems Audit and Control Association, 2007)