When assessing the audit capability of an application, which of the following activities is MOST important?