How an IT audit is carried out and how we best leverage internal/external IT auditor(s) determines the fate of organizations facing compliance mandates today. An increasing number of compliance initiative failures and the reported inadequate empowerment of IT auditors suggests that there are issues that need to be addressed. Are there issues? And, if so, how do we address them?