The techniques used to the auditing process can include automated auditing tools (ready-made security audit systems and/or security auditors' own developed tools) or there can be manual review techniques (e.g. social engineering attacks and auditing checklists)