Security Audit in computer centers

Hi!


I`m looking for a paper that gives examples of questions you could ask an IT-manager about internal and external security of a computer center.
Does something like this exist?

http://www.security-audit-internal-audit.com/