This tool helps auditors gather information to better understand the IT infrastructure of a company.

IT is pervasive throughout the organization across the entire spectrum of the business and information flows. However, information about IT infrastructure and supporting processes needs to be gathered as essential background to a more detailed risk evaluation. Completion of this document by an auditee in advance of a meeting to discuss its content may be practical. Flowcharts, diagrams, as well as policies and procedures can also be provided in support of descriptions.