What is the goal of security audits and the importance of establishing best practices within and organization?

What is the goal of security audits and the importance of establishing best practices within and organization?

Please refer attachment. Needs in text citations with proper APA format