International Journal of Computer Auditing