Stepping Through the IS What to Expect How to Prepare 2nd Edition walks the reader through the full cycle of an IS audit. The early chapters describe how the discipline of auditing came about and why an organization might be subject to, or might solicit, the attention of an IS auditor. The book also discusses the purposes of controls and control models, the development of audit programs and how they relate to the risks addressed by the information systems, as well as how audit management ensures that all relevant risks are considered. Finally, the book delves into the audit process itself. Furthermore, having described what the auditor is trying to achieve and how they will go about it, every chapter in this book has a section addressed to the person being audited. This section describes how to work with the auditor to mutual benefit. While Stepping Through the IS Audit speaks directly to the information technology professionals who are undergoing information systems audits, it will have value to the new IS auditor describing the process as a whole and auditors place in the process.