Specifically, the implementation guidance for the GAO standard states that an auditor may provide the audited entity its opinion on various software packages based on its experience with and knowledge of the effectiveness of these packages at other organizations and based on its knowledge of the audited entity's needs.8 We also agree with the GAO's position that activities such as training the c