Answering these questions will enable the IT auditor to design an effective analytic program. Obviously, the IT auditor must have some knowledge of the organization, systems, data files and tools available, as well as the capabilities of those tools.