One reason companies don’t conduct IT audits is because they require time and resources. While painful, ‘they often identify opportunities for improvement,’ notes Robert Scott, managing partner with intellectual property and technology law firm Scott & Scott.