The relationship of application risks to application controls: a study of microcomputer-based database applications.