CA Kabir, an auditor assigned to conduct a remote audit of Beetal Limited. The audit will be conducted virtually using online platforms, with the…

Key considerations that CA Kabir should address for effectiveness and security of the remote audits are: Feasibility and Planning Planning should involve agreeing on audit timelines, meeting platform (Zoom calls/ Microsoft Teams/Google Meet) to be used for audit sessions, data exchange mechanisms, any access authorization requests. Ensure feasibility is determining what technology may be used, if auditors and auditees have competencies and that resources are available.The execution phases of a remote audit involve video/tele conferencing with auditees. The documentation for audit evidence should be transferred through a document sharing platform. Confidentiality, Security and Data Protection To ensure data security and confidentiality, access to document sharing platform should be sufficiently restricted and secured by encrypting the data that is sent across the network. The information, once reviewed and documented by auditor, is removed from the platform, and stored according to applicable archiving standards and data protection requirements.Auditors should take into consideration legislation and regulations, which may require additional agreements from both sides (e.g., there will be no recording of sound and images, or authorizations to using people's images). Auditors should not take screenshots of auditees as audit evidence. Any screenshots of documents or records or other kind of evidence should be previously authorized by the audited organization. In case of accessing the auditee's IT system auditor should use VPN (Virtual private network). VPN is a service which creates safe and encrypted online connections. It prevents unauthorized users to enter into the network and allows the users to perform work remotely. Risk assessment The communication from auditor as well as auditees need to clear and consistent, and this becomes crucial during remote audit. The risks for achieving the audit objectives are identified, assessed and managed. The assessment if remote audit would be sufficient to achieve the audit objectives should be done and documented for each audit involving all members of the audit team and the audited organization representative.