This book provides a structured approach to preparing for IT security audits. It addresses the critical need for organizations to proactively manage their IT security risks and establish robust control frameworks. The author, Raymond Pompon, draws on his expertise to guide readers through the process of developing and implementing an effective audit preparation plan, ensuring compliance and mitigating potential vulnerabilities.

The book is positioned as a practical guide for IT professionals and auditors. Its focus on a structured audit preparation plan suggests it aims to provide actionable steps for organizations seeking to enhance their IT security posture and meet compliance requirements. The subject matter indicates a likely audience of security managers, compliance officers, and IT auditors who require a systematic approach to risk management.