Answer these INFORMATION TECHNOLOGY AUDITING questions: Why is it important to identify and assess IT risk before developing IT internal controls?

Answer these INFORMATION TECHNOLOGY AUDITING questions: Why is it important to identify and assess IT risk before developing IT internal controls? What could be the consequences if a company’s information technology function does not align its strategy with the company’s overall company vision? Why are formal procedures for change management important?