 Normally, external auditors review the entity's information technology control procedures when assessing its overall internal controls.They must also investigate any material issues raised by inquiries from professional or regulatory authorities, such as the local taxing authority.Auditors may be liable to 3rd parties who are damaged by making decisions based on information in audited reports.