Conclusion
It is imperative in the IT audit environment, this year and
beyond, that IT auditors know how to apply the COSO model
of internal controls. This involves not only an understanding
the components and other aspects of the model, such as the
cross-sectional approach to business units, but also how to
develop meaningful and effective audit procedures, such as
inquiries or observation, from the COSO model.