The task of the audit [German: Revision] is in general to check business processes including the tools they apply with respect to their correctness, security, orderliness, lawfulness, and usefulness. In contrast to a general audit, the IS audit [German: IS-Revision] focuses on information security in the organisation. The goal of an IS audit is to have an independent party determine the current level of security throughout the organisation and point out any existing security gaps and deficiencies. The IS audit is a special type of the (general) audit. The result is an IS audit report with recommendations for improving the level.
