More also needs to be done to address the continuing expectations gap regarding what auditors are doing in connection with the detection of fraud and internal controls , and to audit through electronic information systems rather than around them .
We need to do more to address the gap between what auditors are doing and what we expect them to do .