Most IT audits are theater. Here's what a real one looks like: what are you running, what does it cost, how well does it work? That's it. Everything else is noise.
The 90-Day IT Audit: What to Look For (And Why Most Fail)