This document explains IT controls and audit practice in a format that allows Chief Audit Executives to understand and communicate the need for strong IT controls. Use this guide as a foundation to assess or build your organization’s framework and audit practices for IT business control, compliance, and assurance.