For this discussion, we have selected Cyber Security, Data Governance and IT Strategy and Governance as the key technologies that are of the highest importance to the IT Internal Audit department to review and update their current risk management assessment. Some context on each key technology is detailed below.

1. Cyber Security is a critical risk and a key concern for an organization with threats increasing and diversifying as a result of recent changes in social norms, working habits, and lack of cyber-safe technology environments which are more vulnerable to attacks.

2. Data Governance is the most important asset an organization holds. If used properly, it can change how the organization operates, giving it the ability to make faster and better decisions as well as identifying areas of improvement. Data governance also come with risks that must be addressed by the company which may include increased regulatory scrutiny, unclear data governance requirements, uncertainty over data ownership and usage, issues with data privacy, data security, and data quality issues.

3. IT Strategy and Governance aligns IT strategy with the business strategy in step one, and in step two effective IT Governance structure can have an important and positive impact on how IT operates within the company.

In your Initial Post for each of the technology trends of Cyber Security, Data Governance and IT Strategy and Governance:

3. Please explain in some detail What should Internal Audit be doing to ensure it has the proper levels of governance and control for this technology?