February 10, 2021 By Jonathan Bayeff, Holtzman “Information produced by the entity” (IPE) is any information that is produced internally by the company being audited and provided as audit evidence, whether for use in the execution of internal controls or for substantive audit procedures performed by an external auditor. In this article, we will discuss the three types of IPE you are most likely to encounter, and the level of documentation and assurance each of them requires. IPE that is subject to Information Technology General Controls (ITGCs) does not typically require as high a level of assurance as an IPE that is not subject to ITGCS. Let’s take a closer look at the three types of IPE, from most to least risky.