IT audits don't have to be painful. Find practical, detailed advice on what various types of audit entail and how different audit standards work.

IS audit: What to expect
Jennifer Bayuk's systematic and useful walkthrough of the audit process

SSAE 16: replacement for SAS70 right around the corner
Effective mid-2011, the SSAE 16 reporting standard for American service organizations mirrors international standard ISAE 3402

SAS 70, type II, used correctly

Auditors: Friend or foe?

A tale of two PCI audits

RSA 2010: Why 41% would fail PCI audit