The internal audit and information security functions should work together synergistically: therninformation security staff designs, implements, and operates various procedures and technologiesrnto protect the organization's information resources, and internal audit provides periodic feedbackrnconcerning effectiveness of those activities along with suggestions for improvement. The purposernof this exploratory mixed methods study is investigate how internal audit and information securityrnare relate to each other to protect the organization’s information resources and internal auditrnpractices in Addis Ababa City administration. Anecdotal reports in the professional literature,rnhowever, suggest that the two functions do not always have a harmonious relationship. Thisrnresearch is present the first stage of a research program designed to investigate the nature of thernrelationship between the information security and internal audit functions. It will report the resultsrnof a series of semi-structured interviews with both internal auditors and information systemsrnprofessionals. The researcher analyzed the factors that influence the nature of the relationshiprnbetween the internal audit and information security functions, describe the potential benefitsrnorganizations can derive from that relationship, and present propositions to guide future research.