How can information be gathered from the audited entity?

Gathering information from the audited entity is crucial for a comprehensive audit, and issuing questionnaires to affected persons is a highly effective method for this purpose. Questionnaires allow auditors to collect structured and specific data directly from individuals involved in the processes being audited. They can be designed to cover a wide range of topics, ensuring that all relevant areas are explored and that the information obtained is pertinent to the audit objectives.

This approach also facilitates anonymity and can encourage more honest and candid responses from participants, leading to a more accurate representation of the current state of the entity’s operations. With well-structured questions, auditors can efficiently gather quantitative and qualitative insights that contribute to understanding risks, controls, and compliance.

Relying solely on historical data would limit the auditor's perspective, as this approach does not account for current conditions or changes within the organization that may impact processes and governance. Inviting external consultants may provide expertise, but does not directly engage the audited entity's personnel in the information-gathering process. Conducting informal interviews can also be beneficial but is often less structured than questionnaires and may not yield the same breadth of information needed for thorough analysis. Thus, the use of questionnaires stands out as the most robust method to gather relevant information systematically from the audited entity.