The most important skill for an IS auditor is understanding the business environment and related risk to determine what to test and why. Developing meaningful audit and assurance programs depends on the ability to customize audit procedures according to the nature of the subject under review and the specific risk that must be addressed in the audit area/organization. The following list describes some of the skills that can enable the IS auditor to develop good audit programs