Automated controls audit

There is a rhythm on how to test automated controls

You start with validating the data in the system is accurate and complete, then perform a test of one automated control

With semi-automated controls, the testing will depend on the level of automation

The audit team had 7 major takeaways following the audit automation process: Establish control tests that require structured data first— The audit team tackled complex controls that required machine learning (ML) to gather evidence very early on in the automation journey of internal audit

There is also widespread recognition that automation frees up resources to put to better use elsewhere

From an Internal Audit perspective, undertaking automated controls testing gives auditors more time to invest in fostering relationships and enhancing their creditability as a trusted advisor with stakeholders