Audit Evidence Collection Techniques
Methods to support each finding
The quality of an audit depends directly on the quality of the evidence that supports it, and there are several complementary techniques for collecting it, such as inspecting documents and configurations, directly observing a process in execution, interviewing operational owners, re-performing a control to confirm its result, and analyzing data or logs when large volumes of information need to be assessed. No single technique is enough for every case, and an experienced auditor combines several to triangulate a conclusion, since evidence obtained only through interviews, for example, is less reliable than evidence obtained through direct observation or technical inspection. In practice, each piece of evidence should be backed by its source, the date it was obtained and a verifiable copy or record, because a finding supported only by the auditor's word without documented evidence loses defensibility before the audited area or a regulator.