Hey Sgy, I don't know if you're around. I have just finished working on a huge ITIL and Governance research project. Sybex has recently published an excellent book primarily for the CISA certification candidates. That's basically what I referred to while working on my project. I do have an electronic copy of the book; email me if you're interested-- I will open my ftp port, and you can copy the file! It is 480 pages long, and has flashcards + Q/As related to Governance, ITIL, CIMM, Security & Assurance, CobiT, ISO17799, S-OX, and HIPAA. ~@~