In this sample audit work program, steps to audit an organization’s Information Technology (IT) infrastructure management strategy process are outlined. Risk indicators of potential problems include: increased backlog of business applications, increased use of consultants or outsourcers for strategic versus specific tasks, and increasing IT budget overruns. Potential impacts of inadequate management include: lost revenue opportunities due to inability of IT to meet business needs, increased internal and external customer dissatisfaction with service provided, and excessive investments in IT with minimal return.