Management, control, and audit of advanced EDP systems. (Computer services guidelines., 1977)