Fundamentals of Information Systems Security, 4th Edition

Audit Data Collection Methods

Before you can analyze data, you need to identify what you need and then collect it. There are many ways to collect data, including the following:

• Questionnaires—You can administer prepared questionnaires to both managers and users.

• Interviews—Interviews are useful for gathering insight into operations from all parties. They often prove to be valuable sources of information and recommendations.

• Observation—Observation refers to input used to differentiate between paper procedures and the way the job is really done.

• Checklists—Checklists are prepared documents that help ensure that the information-gathering process covers all areas.

• Reviewing documentation—Reviewing documentation assesses currency, adherence, and ...