To pre-establish appropriate policies and procedures for IT systematically incorporated into the business and used in various ways within the organization to achieve organizational objectives, and to make other basic components of internal control work more effectively.