Accounting Information Systems 8th Edition by James Hall

Exercise 22

Prior to SOX, external auditors were required to be familiar with the client organization's internal controls, but not to test them. Explain why.