Introduction Many organizations conduct IT security audits with external auditor organizations for various reasons. Some perform audits as part of the operation of a management system, while others do so to ensure legal compliance. Recently, the drive for compliance...