I've placed a post in the audit forum concerning Information Technology risks and controls. Given the expertise of those browsing this forum, I wanted to place a link to that post here for your input.