To test the accuracy of information already housed in a database on an un-networked computer, the auditor should select a sample of records and trace them to supporting documentation. This directly verifies whether stored database information is accurate, valid, and supported by source evidence. Submitting test transactions is more appropriate for testing system processing controls rather than validating existing database records. A test program simulating data entry also tests processing logic, not necessarily the accuracy of current data. Evaluating change management may be relevant to system integrity, but it does not directly prove that the data is accurate. Internal auditors should select the test approach that directly addresses the audit objective. Since the objective is data accuracy, Option C is correct.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit