Tracy Ragan: Keeping score in the IT compliance game. ACM Queue 4(7): 38-43 (2006)