The primary objective of this study is to develop the best practices that provide management with a reasonable assurance that information assets and IT infrastructure of the organisation are protected and controlled in a manner that will ensure confidentiality, integrity and availability of information assets and technology that supports an organization. Other objectives are to: 1.Enable IT auditors, newcomers to IT auditing who do not have a background in IT, functional, operational and fina...
