Then came the wave of specialised IT audits who could open the black box and identify numerous new risks associated with the complex workings inside the servers, computers and applications used. The financial/operational auditor could never really understand these risks and full reliance was placed the IT auditor.