After the scoping step is complete, the IT auditor is ready to acquire appropriate data to properly perform testing that meets the objectives set forth. Data acquisition can also be referred to as data extraction. Some common elements to consider include: