IT Auditing in support of the Financial Statement Audit. Using a pre-defined set of IT General Controls, interview client IT department leadership to determine if the controls are in operation. Obtain and inspect evidence for the higher risk controls. Prepare reports identifying the gaps and recommendations. Controls assessments. SOC Reporting. SOX 404 Internal Audit for IT General Controls.