CYB$-400$ Security Assessment & Auditing

$2-2$ Journal: Systems Thinking in IT Audits

When it comes to systems thinking in an IT audit, there is a lot to consider. Explain why each of the following tasks is important:

$1.$ Reviewing potential regulatory requirements

$2.$ Identifying what is both in and out of scope

$3.$ Defining critical requirements for the audit

I would appreciate your help. Thank you.