GTAG: Auditing Computing Infrastructure and IT Operations
July 30, 2025
Copyright Notice All content is protected by international copyright laws. You may reference or quote small portions of this document with proper attribution to The IIA, but unauthorized reproduction, distribution, or use beyond that, other than for your own personal use, is strictly prohibited and may constitute a violation of copyright law, resulting in civil and criminal penalties. Contact copyright@theiia.org for permission to use our materials.
Computing infrastructure and IT operations are the fundamental technology assets and services required for organizations to conduct business operations, manage data, and achieve objectives.
This guide helps internal auditors assess risks, evaluate controls, and ensure IT infrastructure and operations support organizational performance, continuity, and resilience.
This guide expands on “IT Infrastructure” section of the GTAG “IT Essentials for Internal Auditors,” providing an in-depth look at risks and controls relevant to the hardware and software that run an organization’s technology environment.