Author: University of Waterloo Research Symposium on Information Systems Assurance (1999 Toronto, Ontario).