For information about the IIS configuration file, see Working with the IIS Metabase and the IIS Metabase Property Reference. Describes the structure of ASP.NET configuration files and defines section handlers.
As an Internal Auditor, there are some advantages you may not otherwise have. You have the opportunity to see other areas of the company and what goes on there, since you do not audit your own area. You get to meet other people in the company. Other people get to know who you are.
In doing so, the auditor will need. to identify the optimum balance between, on one hand, relying on. internal controls and reducing the level of his substantive tests, and on. the other hand, placing little or no reliance on internal controls and. seeking audit satisfaction from a higher level of validation procedures.