What is an audit universe and what does it include? What is Control Objectives for Information and Related Technology (COBIT) and why is it valuable to management and IT auditors? Why are risk assessments significant to the audit function? Summarize the importance of an audit plan. What are the four minimum steps an audit plan should have?