That survey could be executed in several ways. The most efficient way (in my opinion) is to have the man who designed the system explain it in full to the auditor, to make clear what types of safeguards he has put into the system. The auditor then should want to see in the flow charts, as well as in the written out programs, that these safeguards are properly introduced, and he should want to evaluate them in a broad setting, that is to say not confining himself to the computer, but taking all organizational implications with other departments into account. If this evaluation has to mean anything at all, the auditor has to have a very comprehensive knowledge of : the checks which are built in to the particular machine; and the checks which can be programmed.