Understant the audit areas/subjects
Audit areas
Sensite information
Common risk
Regulations
General IT architecture
Control breach
Audit subjects
Sensitive information
Policies and procedures
Business practices
IT architecture
Outsource?
Interview key managers
Tour key organization facility
Prior audit report
Environment change
Last updated