IT auditing, Risk Management and Incident Handling – Part 1