Sandia National Laboratories, which is operated for the US Department of Energy's National Nuclear Security Administration, has released a new study "An Introduction to Information Control Models" which provides an interesting comparison of BS7799, Cobit, CoCo, COSO, FISCAM, GAPP, GASSP, ITCG, SSAG, SSE-CMM and SysTrust. It can be ordered from Ordering Methods or by e-mailing to orders@ntis.fedworld.gov It covers more control models than any other study of its type of which I am aware.