Blockchain security risk assessment and the auditor

A blockchain is an Internet‐based peer‐to‐peer system that forms a network of independent and connected computers that simultaneously record and verify transactions. This peer‐to‐peer system focuses on who owns the information and how that information is transferred. Blockchains offer significant advantages over traditional databases where users can delete, modify, and change records. The advantages include improved efficiencies, lower costs, enhanced transparency, and an immutable audit history of all transactions. The advantages, however, are not without significant risks. The risks include technological risks, data security risks, interoperability risks, and third‐party vendor risks. Because of the inherent advantages in blockchains, auditors are being called upon to provide assurance services to clients who use blockchains and to advise clients on blockchain technology. Therefore, auditors must be equipped with the knowledge and expertise of not only blockchain technology, but also the assessment of risks inherent in blockchain technology.