for information systems audit and assurance professionals,
the revised International Standards for the
Professional Practice o f Internal Auditing (Standards)
that took effect at the start of this year were of interest,
because for the first time a standard (Standard 2110:
Governance) directly addressed IT governance. Standard
2110.A2 requires the internal audit function to “assess
whether the information technology governance of the organization
supports the organization’s strategies and objectives.”
The need for Standard 2110.A2 clearly is highlighted
in the executive summary of The IIA’s Global Technology
Audit Guide (GTAG) 17: Auditing I T Governance, issued
in July 2012, which observes that, “with the continued
increase in the speed of technological advancement, IT
proliferation, and organizational dependence on IT, it is
clear why the internal audit activity should address this