Source: https://chapters.theiia.org/montreal/ChapterDocuments/GTAG 8 - Audit des contrôles applicatifs.pdf