Same As Last Year' does not cut it for IT auditors looking to successfully adapt to new risks and opportunities.