IT Auditors: Mind the (Database) Gap

The design of some IT systems can leave gaps, particularly between the application and the database. Understanding and pointing out these gaps should be the concern of all IT auditors.