Discuss the role that IT governance plays in IT audit. How does IT governance differ from corporate governance? Are there any similarities between the two concepts? In your opinion, what do you think is the biggest challenge when it comes to auditing governance?