Discussion includes – Declining effectiveness of legacy solutions – These are the only solutions auditors are familiar with and expect evidence from – Declining controls in general with the growing usage of BYOD and SAAS solutions – The increase in SAAS offerings puts companies data at higher risk (users can test and use a new solution in 30 min) – Data transfer between SAAS platforms no longer require IT or cyber so access