Information system (IS) auditing and assessment aims at improving IS security, managing IS activities and costs. This chapter provides the reader with a state-of-the-art on IS auditing concepts, methods and tools needed to allow the auditor to evaluate the quality of an information system. A meta-model is provided.