When More Data Does Not Mean Better Assurance

Audit has always been fundamentally concerned with evidence. Yet the modern audit environment presents an unusual paradox: auditors have access to more information than ever before, while determining what constitutes sufficiently reliable evidence is becoming more difficult.

ERP systems, data warehouses, APIs, automated controls, cloud applications and artificial intelligence can generate enormous volumes of information. The challenge is no longer simply obtaining evidence. It is determining whether the evidence is relevant, reliable, complete, appropriately sourced and sufficiently current.

This creates what could be described as the audit evidence provenance problem.

Consider an analytical procedure generated from a management dashboard. The output may appear precise, but an auditor should still be able to understand where the underlying data originated, how it was transformed, what assumptions were applied and whether the information remained complete throughout the process.

The professional judgment required at this point is significant. A technologically sophisticated audit procedure does not automatically produce technologically sophisticated assurance. This is particularly relevant as audit firms increasingly incorporate automation and AI-enabled tools into engagements. The IAASB has been examining technology's implications for audit and assurance, including how emerging technologies affect engagement quality and professional judgment. The need to adapt assurance standards to technological developments was emphasized in their work.

The emerging question for auditors is therefore not simply “Can we obtain the data?”

It is: “Can we explain why this data should be trusted?” That distinction has significant implications for audit methodology, documentation and quality management.

For internal audit, the same principle applies. Dashboards, automated reports and analytics should not be treated as inherently reliable merely because they are system-generated. In assurance, evidence should do more than increase documentation. It should increase confidence in the conclusion.

The future of audit may therefore depend less on how much evidence auditors can process and more on how effectively they can establish the chain of reliability behind that evidence.