For information about the IIS configuration file, see Working with the IIS Metabase and the IIS Metabase Property Reference. Describes the structure of ASP.NET configuration files and defines section handlers.
As an Internal Auditor, there are some advantages you may not otherwise have. You have the opportunity to see other areas of the company and what goes on there, since you do not audit your own area. You get to meet other people in the company. Other people get to know who you are.
You need real life experience. A government auditor is good place to start because so much of what big companies do is with government contracts. It gives you a window into the government side, the skill's are transferable and you will meet lots of people to do good old fashioned networking.