To pre-establish appropriate policies and procedures for information technology systematically incorporated into the business and used in various ways within the organization to achieve organizational objectives, and to make other basic components of internal control work more effectively.