CISA: Certified Information Systems Auditor

Audit conclusions must be supported by sufficient, appropriate evidence. Email can provide valid electronic evidence, but using it as the sole engagement method may prevent adequate corroboration and restrict procedures needed to establish the reliability, relevance, and sufficiency of the evidence.