It should not be surprising when a vendor requesting an audit suggests or even requires the use of an automated tool to assist with the discovery process. Problems arise, however, when the auditor insists on the use of a particular tool (often, a tool that is owned and made available by the auditor).