Digital Auditing, Data Analytics and Emerging Technology
Domain 11 tests audit in a digital environment: CAATs, data analytics, IT controls, audit trails and emerging technology risks.
Core rules
- IT general controls (access, change management, operations) support the reliability of application controls and reports.
- Before using data analytics, test completeness and accuracy of the data extracted; reconcile control totals to the general ledger.
- CAATs can test 100% of transactions, but the auditor still evaluates exceptions and documents the logic, parameters and results.
- The Companies Act audit-trail requirement and the DPDP Act 2023 add practical compliance considerations for digital records and personal data.
Worked example
The auditor imports the full journal ledger and tests manual entries posted at quarter-end above ₹5 lakh. Control totals reconcile to the trial balance. The auditor identifies 14 unusual entries, traces five to supporting documents and finds one unsupported credit to revenue. The reasoning is that completeness of the population is the foundation; analytics without a complete population proves little.
Traps
Accepting a client-prepared extract without testing completeness; treating a large sample as a complete population; ignoring IT general controls while relying on automated reports; and failing to document analytics parameters and exception follow-up.