After answering these questions, the IT auditor should be able to determine the best approach to take to satisfy the objectives and purpose. Next, a planning meeting, where issues such as the specific procedures and tests can be discussed, should be set. Consideration should be given to relevant data that lie outside the auditee’s systems and data files (e.g., cloud, data center, industry data), and to any issues in getting data, such as usefulness and reliability. Individuals from both IT and the business should be involved, as both perspectives prove beneficial. IT understands how the data look, where they reside and how best to obtain them, while the business can answer questions on what information may be required to meet objectives and the flow of data from a business perspective.