information security phd thesis pdf external audit thesis