These tools allow the implementation of continuous auditing concept, which allows continuous risk assessment, trough audit activities that identify and evaluate companywide risk levels by examining trends in the data-driven risk indicators within a single process or system, comparing to their past performance and other business systems; and continuous control assessment that identify whether key controls are working properly [40].