The internal audit activity may accept requests from management to perform advisory services regarding how the IT governance of the organization supports the organization’s strategies and objectives.