 It is often then referred to as an information technology security audit or a computer security audit.However, information security encompasses much more than IT.An auditor should be adequately educated about the company and its critical business activities before conducting a data center review.