Conducting an IT Audit: Industry Compliance and Data Protection