The data contained in the preceding files provide evidence that may either corroborate
or refute audit objectives. Most of the tests described in the following section involve
using ACL to access and extract data from these files. Recall from the previous chapter
that each file needs to be defined in terms of its physical location and its structure.
Through a series of easy-to-use pop-up menus, the auditor specifies the name of the
file and where it resides on the mainframe or PC. ACL then prompts the auditor to define
the file’s structure in terms of the length of each field and the data type contained in
each field (i.e., numeric, character, or date). When the data definition is completed, it is
saved under a unique name assigned by the auditor. All future file access is accomplished
by simply selecting the data definition from an ACL menu. ACL automatically locates
the file and presents it on screen, where the auditor can review and manipulate its contents.
Figure 10.8 shows a sample ACL data definition screen.