they support. In spite of significant advances in the information security area many information systems are still … vulnerable to inside or outside attacks. The existence of an internal audit for information system security increases the … probability of adopting adequate security measures and preventing these attacks or lowering the negative consequences. The paper …