IT Auditors Need to Come Out of the Black Box

Many IT auditors are “coming out of the black box”—taking an enterprise view of IT, IT controls, and managing IT and business risks. This article describes how IT auditors can play a lead role in improving both the value-added proposition of the audit function and in streamlining business processes and improving efficiency and effectiveness of operations while maintaining a focus on IT controls.