In internal auditing, collecting and evaluating evidence is a cornerstone of the audit process. The value and validity of audit findings depend heavily on the quality of the evidence. Below is an explanation of the four key criteria used to assess audit evidence:

A. Sufficiency

Definition:
Sufficiency refers to the quantity of audit evidence obtained.

Explanation:
Auditors must gather enough evidence to form a reasonable basis for their conclusions and opinions. The amount needed depends on the risk of material misstatement, the nature of the audit objective, and the quality of the evidence (e.g., less evidence is needed if the evidence is strong and reliable).

Example:
If testing the effectiveness of a payroll system, an auditor may need to examine a representative sample of payroll transactions—not just one or two.

B. Reliability

Definition:
Reliability refers to the trustworthiness and credibility of the evidence.

Explanation:
Reliable evidence is accurate, authentic, and unbiased. The source and method of obtaining the evidence affect its reliability. Evidence from independent sources, written documentation, or systems with strong controls is more reliable than verbal statements or internally generated data without checks.

Example:
Bank confirmations or vendor invoices are more reliable than an internal email from an employee stating an amount was paid.

C. Relevancy

Definition:
Relevancy means the evidence directly relates to the audit objective or assertion being tested.

Explanation:
Audit evidence must be directly connected to the question or risk under investigation. Irrelevant evidence, even if accurate and ample, does not help in making a correct conclusion about the matter.

Example:
If the audit objective is to assess compliance with expense policy, evidence related to inventory records would not be relevant.

D. Usefulness

Definition:
Usefulness is the extent to which evidence contributes to achieving the audit objective or helps in decision-making.

Explanation:
Usefulness is broader than relevancy. It includes how well the evidence supports conclusions, helps communicate findings, or influences stakeholder decisions. It must be understandable and actionable.

Example:
A clearly summarized report showing exceptions to procurement policy, with data and impact analysis, is more useful than a disorganized list of transaction logs.