Over the years, the role of the computer auditor has changed to being more consultative and value adding. Clearly, where a new system is being developed, it is more cost effective for audit comments to be provided prior to a system being implemented, when improved security and control features can be included more easily and cheaply. Similarly, although computer auditors regularly undertake audits of say logical access controls, there is considerable scope for computer auditors to be involved in the design of those components. There is an issue of independence if the computer auditor becomes involved in the design process as this may be compromised if the same individual subsequently audits.
