This will require the auditor to pose certain questions to ensure:
1. Availability
Potential question - What measures are in place to ensure that the data is available
when required?
To answer this question the auditor will access the organisation’s computer system to
ensure it will be available for the business at all times when required.
2. Confidentiality
Potential question - What controls are available to ensure that only authorised personnel
can access the data?
The auditor will wish to review and test the confidentiality of the organisation’s
information to understand that the information in the systems is only disclosed to
authorised users.