Using Audit Tools to Organize Data Capture

Auditors can increase their productivity through the use of computer-assisted audit tools and techniques (CAATT). These tools and techniques are simply computer applications that auditors use to assist them in their job functions. With these tools, auditors can perform tests that otherwise might be difficult or even impossible to do manually. This includes analyzing large amounts of data or increasing the coverage of the audit.

Although there are many specialized audit-specific tools available, even an office spreadsheet application is considered a CAATT. The tools and techniques include general audit software, audit expert systems, utility software, and even simple queries and scripts. CAATTs are used for many different functions, including the following:

• Testing transactions in applications

• Reviewing procedures

• Testing system and application controls for compliance

• Conducting automated vulnerability assessments

• Performing penetration testing

During the course of an audit, one of the objectives of the auditor is to produce evidence. Much of the process will still be manual. The use of CAATTs, however, allows for the production of much more evidence than what would be possible manually. Before using an automated or computer-based tool, the auditor should first be familiar with the tool and have the necessary knowledge and skills required to use it. The auditor should also take necessary steps to be successful and to limit the risk of using such tools during the process. Examples include the following:

• Establish any related resource requirements. This includes making sure the needed IT facilities, equipment, data, and personnel are available and accessible.

• Understand the type of data to be examined. This includes how much data, what type of data, and the format of the data.