Larry Corriea lays it out, logically and concisely. Seriously, a really good read.

What an auditor thinks