CHAPTER NINE

Audit Evidence Process

THIS CHAPTER EXPLORES the fundamental audit evidence process and the gathering of evidence that may be deemed sufficient, reliable, relevant, and useful. Evidence-gathering techniques such as observation, inquiry, interviewing, and testing are examined and the techniques of compliance versus substantive testing are contrasted. The complex area of statistical and non-statistical sampling techniques and the design and selection of samples and evaluation of sample results is examined. The essential techniques of computer-assisted audit techniques (CAATs) are covered and a case study using the IDEA© software downloadable with the book is included on the download.

AUDIT EVIDENCE

As noted in Chapter 3, IT auditors must gather audit evidence in order to express opinions. Audit evidence itself may be classified as sufficient, competent, relevant, or useful and evidence is typically classified as physical, testimonial, documentary, or analytical.

AUDIT EVIDENCE PROCEDURES

As has been stated, the auditor gathers evidence by following the audit program, which is a set of detailed steps that the auditor will follow in order to gain the appropriate evidence and, for an IT auditor, may well include the use of computerized techniques, although this is not always the case.

The evidence gathered permits the expression of an opinion on the efficiency, economy, and effectiveness of the activities. It lists directions for the examination and evaluation of information ...

Get Auditor's Guide to IT Auditing, Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.