4. a) Why is it important for IT Auditors to know about the legal environment of information systems? (5 Marks)

b) The audit objective and scope has a significant bearing on the skill and competence requirements of an IS auditor. There is a set of skills that is generally expected from an IS auditor. Discuss these skills in brief. [5 Marks]

c) Explain the purpose of a change request form and state its requirements. [6 Marks]

d) What is the purpose of an information security policy? [4 Marks]