Everything about Code audit

🧭 Start here: a 6-step reading path

1. Read the overview: Code auditA 5-minute orientation
2. Skim a recent paper: Code sharing and reproducibility in survey-based social research: evidence from a large-scale auditInfluential work since 2022
3. Pick up a classic book: The evaluation and management stepThe most-reprinted book on the subject
4. Read the landmark paper: Audit committees, Cadbury Code and audit fees: an empirical analysis of UK companiesCited 54 times
5. Go sideways: Secure codingA closely related topic
6. Go sideways: Code injectionA closely related topic

🏆 Landmark papers (most cited)

• Audit committees, Cadbury Code and audit fees: an empirical analysis of UK companies

  Andrew R. Goddard, Carol Masters · 2000 · Managerial Auditing Journal · 54 citations

• Impact of Audit Committee and Audit Quality on Preventing Earnings Management in the Pre- and Post- Nigerian Corporate Governance Code 2011

  Nuraddeen Usman Miko, Hasnah Kamardin · 2015 · Procedia - Social and Behavioral Sciences · 28 citations

• The “Code” of Ethics: A Holistic Audit of AI Code Generators

  Wanlun Ma, Yiliao Song, Minhui Xue · 2024 · IEEE Transactions on Dependable and Secure Computing · 21 citations

• Code of ethics quality and audit fees

  Hong Kim Duong, Giorgio Gotti, Michael T. Stein · 2022 · Journal of Accounting and Public Policy · 13 citations

• UK audit committees and the Revised Code

  Lynn Avison, Christopher J. Cowton · 2012 · Corporate Governance: The international journal of business in society · 8 citations

• Institutional investors, stewardship code disclosures and audit fees

  James Routledge · 2020 · Asian Review of Accounting · 5 citations

• A Framework for Legacy Source Code Audit Analytics

  Kevin C. Moffitt · 2018 · Journal of Emerging Technologies in Accounting · 5 citations

• A Prospective Audit of Airway Code Activations and Adverse Events in Two Tertiary Hospitals

  Yuen Mei Chow, Zihui Tan, Chai Rick Soh · 2020 · Annals of the Academy of Medicine, Singapore · 4 citations

🆕 Influential since 2022

• Code sharing and reproducibility in survey-based social research: evidence from a large-scale audit

  Daniel Krähmer, Laura Schächtele, Katrin Auspurg · 2026 · Royal Society Open Science · 4 citations

• The Effect of Audit Experience and Audit Risk on Audit Judgment with Auditor’s Perceptions of the Code of Ethics of Public Accountants as Moderating Variables

  Eka Merdekawati · 2022 · E3S Web of Conferences · 3 citations

• COBRA: COde Blue Retrospective Audit in a metropolitan hospital

  Robert A. Paul, Craig Beaman, David A. West · 2022 · Internal Medicine Journal · 3 citations

• Audit-as-code: a policy-as-code framework for continuous AI assurance

  Aoun E. Muhammad, Kin-Choong Yow, Shrooq Alsenan · 2026 · Frontiers in Artificial Intelligence · 2 citations

• A Cross Language Code Security Audit Framework Based on Normalized Representation

  Yong Chen, Chao Xu, Jing Selena He · 2022 · Journal of Quantum Computing · 2 citations

📚 Books worth reading

• The evaluation and management stepCarol J. Buck · 2008
• 📕State of Oregon, Building Codes Agency, Salem, Oregon, special examination, July 1986 to February 1989 · 1991
• 📕Special review, State of Oregon, Building Codes Agency, Salem, Oregon, August 31, 1990 · 1990
• 📕Low-Income Housing CreditS/N 048-004-02421-7, Internal Revenue Svc. · 1999
• Auditing Evaluation And Management CodingJoe Rivet · 2006
• Administration and enforcement of state building codes in Montana, Department of CommerceMontana. Legislative Audit Division · 1997
• Approve NothingRavi Vale · 2026
• DRG Desk Reference 2007Ingenix · 2006

Ranked by number of editions on Open Library, a rough measure of how lasting a book is.

🔗 Related topics

• Secure coding Secure coding is the practice of developing computer software in such a way that guards against the accidental introduction of security vulnerabilities…
• Code injection Code injection is a computer security exploit where a program fails to correctly process external data, such as user input, causing it to interpret the…
• Uncontrolled format string Uncontrolled format string is a type of code injection vulnerability discovered around 1989 that can be used in security exploits. Originally thought harmless…
• Defensive programming Defensive programming is a form of defensive design intended to develop programs that are capable of detecting potential security abnormalities and make…
• Language-based security In computer science, language-based security (LBS) is a set of techniques that may be used to strengthen the security of applications on a high level by…
• Vulnerability (computer security) In computer security, a vulnerability is a flaw or weakness in a system's design, implementation, or management that can be exploited by a malicious actor…
• SQL injection In computing, SQL injection is a code injection technique used to attack data-driven applications, in which malicious SQL statements are inserted into…
• File inclusion vulnerability A File Inclusion Vulnerability is a type of web vulnerability that is most commonly found to affect web applications that rely on a scripting run time…