IT Security in IT Audit

IT Security in IT Audit

How detailed is the IT security checks in an average IT audit? Is an “average” IT Auditor (CISA) qualified to do a detailed security audit, or even to just report on the security aspects of an IT audit? Is the idea of an IT audit not specifically to identify...