More also needs to be done to address the continuing expectations gap regarding what auditors are doing in connection with the detection of fraud and internal controls, and to audit through electronic information systems rather than around them.