Nmap is commonly used as a network scanning and penetration testing tool, making it suitable for the information system auditing process. Nessus is a well-known vulnerability scanner that is also frequently used in penetration testing to identify vulnerabilities within systems. These tools are both essential in evaluating the security posture of an information system during an audit.