How to assess compliance risk associated with computerized systems.