I definitely suggest that you should discuss this with your auditor, with your boss,
and with the IT Department at your company.
Start with your boss, and let him/her identify and send you to other parties as (s)he sees fit. That's part of your boss's job.
(No offense ...) If you really don't understand the requirement and/or how to do it, then how can you possibly produce a meaningful "audit" result?
Of far more concern to the company would be that you might
think that you succeeded, but be wrong. They
think that your audit result is sound, but,
"oops!," it isn't. (Hint: auditors
don't like
"oops!")
I expect that any or all of these people would be very happy to give you a "nudge" in the right direction, so that you can fulfill the task and so that everyone
else concerned can have proper confidence in it. And, you'll learn something new.
I'm a big fan of the
"five-minute rule."
Quote:
If you're 'stuck' for more than five minutes, ask for help.
|
No one knows everything.
(Even if they think they do. ) And, no one is seriously expected to. If you're not sure how to do something, especially something as important as this, let your boss be the first one to know. There is no shame nor risk in it.