What’s the best way to organize the IT & IS Audit department in a bank ? What’s the objectives, work area, responsibilities of the department ?