More also needs to be done to address the continuing expectations gap regarding what auditors are doing in connection with the detection of fraud and internal controls, and to audit through electronic information systems rather than around them.
We need to do more to address the gap between what auditors are doing and what we expect them to do.