2.3 Information Technology audits are used to examine and evaluate organization systems internal control design, efficiency and effectiveness. This usually includes but not limited to development processes, security protocols, information systems usage etc. The audit examines the environment of automated information systems and how people use those systems.

Discuss the different types of controls that are useful to an auditor when conducting an audit in an IT environment. (10 marks)