Internal audit provides an independent review
and analysis of the organization's information security initiatives. Ideally, the feedback provided by
internal audit can be used to improve the overall effectiveness of the organization's information security.
These two functions should work together synergistically to maximize the effectiveness of an
organization's information systems security program. Indeed,