IT Governance - Auditing Information Systems: Enhancing Performance of the Enterprise - page 72

advantage, there are many security challenges which enterprises have to deal with as they
make use of the Internet for business operations.
The role of the IS auditor would be to ensure that the board understands its mandate regard-
ing information security. The board should regularly receive information on performance
of security management. As part of IT governance audit, the IS auditor should review se-
curity in the enterprise and report to management or the board on findings and conclusions
regularly.