IT Auditing Using a System Perspective