fscom's Stephen Whittaker and Greg James outline the steps involved in preparing for an IT audit, including the aspects that will be assessed, the measures that should be carried out by staff and assessing and implementing the auditor's advice and recommendations.