the feedback provided by internal audit can be used to improve the overall effectiveness of the organization's information security. These two functions should work together synergistically to maximize the effectiveness of an
organization's information systems security program. Indeed,