A high degree of skill and experience often involving IT audit specialists is necessary to
undertake such an evaluation of the IT controls. In making the decision to test controls
connected to the computer environment, the auditor will consider:
• Extent of Use
• Importance to the Business; and
• Complexity