Fundamental concepts related to an information systems audit. Principles and practices related to secure operation of existing information technology. Information security accountability, development of internal control objectives and framework, and identification of appropriate audit procedures for a secure information system.