How is an IT audit different from a financial statement audit? What are the differences between the four main types of IT audits?