Yes. COA, through the IT Audit Office (ITAO), Systems and Technical Services Sector, can motu proprio, or even upon request of the Audit Team concerned, conduct IS audit, provided, that the risk assessment suggests that the conduct of such is warranted.