IT auditors are involved in a number of activities apart from assessing risk for financial
audit purposes. Many of these auditors work for professional service organizations, such as
Ernst & Young, PricewaterhouseCoopers, or KPMG. (See Figure 1-11 for a partial listing of
the types of services offered by Ernst & Young.