An organization is considering the acquisition of a target organization. Senior management asks the internal audit function to advise on the target organization’s information security practices. What type of internal audit service is this?