An empirical examination of CobiT as an internal control framework for information technology · Study