 Most commonly the controls being audited can be categorized to technical, physical and administrative.Auditing information security covers topics from auditing the physical security of data centers to auditing the logical security of databases and highlights key components to look for and different methods for auditing these areas.When centered on the IT aspects of information security, it can be seen as a part of an information technology audit.