https://tiagosouza.com/itgc-guidelines-for-auditing-system-application-and-database-logs/