Imagine that you have been promoted to the position of an IT manager in a mid-sized firm

Imagine that you have been promoted to the position of an IT manager in a mid-sized firm, SecureFunds Inc, which specializes in financial services and has recently undergone significant growth and adapted to the new conditions of doing business by developing digital services for customers. Nevertheless, as it expanded its operations, the company has experienced some difficulties in managing its IT security risks with specific regard to compliance matters and the safeguarding of the client’s data.

As part of your work, you are supposed to conduct the IT audit for compliance and ensure that the company complies with the set standards and industry best practices. It is crucial for your focus to continue to build and strengthen an efficient IT foundation that can cater to growth and protect against security risks.

· Discuss the scope of an IT audit for compliance and the use of standards and frameworks.

· Explain the role of proper security controls, such as configuration and change management, in maintaining IT infrastructure security.

· Discuss the importance of using standards in compliance auditing.

Textbook: Johnson, R., Weiss, M. M., & Solomon, M. G. (2024). Auditing IT infrastructures for compliance (3rd ed.). Jones & Bartlett Learning. https://online.vitalsource.com/#/books/9781284260908