, which are capable of protecting the computer system and computer data as well as the management of risks associated with crime or other causes; (4) appropriate accounting systems for the business and