Author: University of Waterloo Research Symposium on Information Systems Assurance (2001 Toronto, Ontario).