Methodology or technique

Differentiate between the two roles IT auditors can take on in a SD&I project. What methodology or technique is used to bring users and project team members together to create a detail design? Throughout the system development and implementation project, the IT auditor will make control recommendations to management resulting from identified findings. Explain why recommendations from IT auditors may often be rejected.