ISACA, IT Control Objectives for Cloud Computing: Controls and Assurance in the Cloud (2011) (Chapters 1 and 2.)