The auditor can verify the correctness of programmed decision rules by using either
the test data or integrated test facility (ITF) approaches to directly test their functionality.
This testing is easily accomplished by creating several dummy customer accounts with
various lines of credit and then processing test transactions that will exceed some of the
credit limits. The auditor can then analyze the rejected transactions to determine if
the computer application correctly applied the credit policy.