A system of internal control that operates within an automated
environment provides for an opportunity to perform real-time auditing, also
referred to as continuous auditing. A risk-based audit approach combined
with developing an annual audit plan is a hit-or-miss process unless a
significant amount of relevant business and operational information is
available. Much of this information is available to the auditor and can be
delivered daily, weekly or whenever the appropriate timeframe might be.