You are required to read the following statement/case carefully, and then, discuss statement/case content, stating examples how this content can be implemented, and suggesting new and innovative ideas for improvement.

The auditor should gather evidence to be able to compare information under audit with established criteria. In doing so, information risk can be effectively reduced.