An assimilation maturity model for IT governance and auditing · Study