The audit process requires the IS auditor to gather evidence, evaluate the strengths and weaknesses of internal controls based on the evidence gathered through audit tests, and prepare an audit report that presents weaknesses and recommendations for remediation in an objective manner to stakeholders