The information technology committee may request the state auditor to conduct an information technology compliance review. The review may consist of an audit of an agency's information technology management, information technology planning, compliance with information technology plans, and compliance with information technology standards and policies or an audit of statewide compliance with specific information technology standards and policies.
N.D.C.C. § 54-35-15.4