Internal
audit can also use production data (and is strongly
urged to do so by many audit authorities and
best practices) to assist in continuous auditing,
substantive testing and even when undertaking
forensic work, which scrutinizes the whole data
population to rule out fraud or irregular practices.