Program review, or program audit, is becoming an accepted technique in computer auditing. This paper describes the technique and examines whether it has a legitimate role in both external and internal audit work. A program review methodology is suggested and user experience is reported and analysed. It is suggested that internal auditors in particular may value program review and are relatively well placed to exploit it.