The IIA (Institute of Internal Auditors) have produced a series of publications with guidance on IT, considering CAE (chief internal audit executive) and audit supervisors/managers as the intended audience.
Various topics are covered in individual guides, such as, Application Controls, Privacy, Outsourcing, Patch management and IT controls.
For an updated listing and download click:
http://www.theiia.org/guidance/technology/gtag/