Auditors have long suffered unease forming conclusions related to information technology controls. They have no standards or principles to guide them, no clear way to match IT controls to the ...