A high degree of skill and experience often involving IT audit specialists is necessary to undertake such an evaluation of the IT controls. In making the decision to test controls connected to the computer environment, the auditor will consider:
• Extent of Use
• Importance to the Business; and
• Complexity