IT audit involves evaluating the IT system of a company based on common industry and regional references. Its goal is to identify and analyze risks related to the digital environment of a company.