This work consists in evaluating the IT system of a company from a common reference base of activities. Its objective is to identify and analyze the risks related to the digital environment of a company or an administration. It answers the following questions: (1) Why do an IT audit? (2) How to perform an IT audit? (3) What are the possible areas of investigation for an IT audit? (4) What are the tools of the IT audit?