The Opus dei guy passed a cbk directive requiring a full system audit of banks systems to accompany audits meaning banks now have fewer places to hide.
There is a reason we have imperial as a case study. When it comes to system audits previously the system was not being interrogated 100% and some institutions (audit firms) found the services of system auditors as very expensive. A system auditor does alot beyond getting reports
Get a database admin and like that you have 100% interrogation. System audit it’s not like normal audit. You dnt sample you query everything. That’s why they are damn expensive.