Sufficient Control Evidence? 654



  • :?: As a member of Internal Audit, I have been asked to provide guidance on what ‘sufficent control evidence’ would be.
    Obviously, evidence has to be relevant, valid, understandable and timely, but has anybody received any details from your external auditors or others what would be’sufficient’??? Or any other guidance?
    Many thanks for any info, links, hints etc.
    Cheers,
    Crossy



  • isaca.org. What they use is what my company uses as a definition.
    There is a PDF file with what you are looking for on that webpage. I cannot remember what it is called, and I’ve only got a print-out of some of the pages.


Log in to reply