TheImpactofInationTechnologyontheAuditProcess(英文版)

《TheImpactofInationTechnologyontheAuditProcess(英文版)》由会员分享，可在线阅读，更多相关《TheImpactofInationTechnologyontheAuditProcess(英文版)（46页珍藏版）》请在装配图网上搜索。

1、,Click to edit Master title style,Click to edit Master text styles,Second level,Third level,Fourth level,Fifth level,11-,*,The Impact of InformationTechnology on theAudit Process,Chapter 11,AuditinginanElectronic Environment,GAAS areapplicable ratherornotacomputerisused,Special concerns about comput

2、er,Technicaltraining,Specialist,Planningandevidence,Effects ofComputerProcessing on theAudit,Transactiontrails-existforshorttime,Uniform processingoftransactions,Hardertosegregate dutiesbecause allwork donebycomputer,Potentialfor errorsandirregularities-fictitious entries,Potentialfor managementsupe

3、rvision-exceptionreporting,Initiation of transaction processingautomaticallybycomputer,AssessingRisksofInformationTechnologies,Unauthorizedaccess,Loss of data,Reduced segregation of duties,Lack of traditional authorization,Need forITexperience,ElementsofComputerBasedSystems,Hardware,Software,SystemS

4、oftwareandApplicationSoftware,Documentation descriptionofsystemandcontrols,Personnel,manage,designprogram operateorcontroldata.,Data,Control Activities,control overprocessingoftransactions,CharacteristicsofSystem,Batchorsequential processing,Onlinerealtime processing,Mainframevs.miniorpersonalcomput

5、ers,Networks,LANsand Modems,Complex Systems,transactiondriventoupdate files.,Simple,batchprocessing.,Planningtheauditwithcomputers,Extenttowhichcomputers areused,Complexity of computer operationscomplexintegrated or simpleapplications,Organizationalstructureofcomputerprocessing-centralvs.decentraliz

6、edorservice,Availabilityofdata,UseofCAATs,Need forspecializedskills,Planning,Understand thecomputerenvironmenttodetermine nature,timing andextentoftesting,Organizationalstructure,Client,scomputerresources,Structureofthe computingdepartment-segregationofduties,Overviewofcomputeroperatingactivities,Cl

7、ient,spoliciesand procedures-formalwritten,updatedcurrent,PlanningCont.,Client,smonitoring of thesystem,Existenceofdesignanddocumentationstandards,Policies and controls for programmodifications,Policies and controls foraccess todata,Availability ofperformance reportsforreview bymanagement,Existenceo

8、f internal audit and work oncomputer processingintegrity,AccountingSystem-how transactions areprocessed,How InformationTechnologies Enhance InternalControl,Computer controls replacemanual controls.,Higher-qualityinformation isavailable.,AssessingControl Risk,Identify control objectives for thetypeof

9、 errorsthatcould occur,Identify wherethe errorscould occur inprocessing,Identify control activities designed andputin operation toprevent theseerrors,Evaluate control activities for assessment ofcontrol risk,Possible Errorsin Processing,Preparingsource documents,Batchtotal preparation,Dataentry,Tran

10、sfer of data,Correct input filesfor processing,Output files createdor masterfiles updated,Master file maintenance,Automatictransactions bycomputer,Errors identified byprocessing arecorrectedandreentered,CAATS,Computer Assisted Audit Techniques,Written for a specific client,Generalized softwareto be

11、used formanyclients.,GAS GeneralizedAudit Software,Software created orpurchased,Generic and canbe used for many audits,Costadvantagebecause itis not just used ordevelopedforone client,GAS AuditProcedures,Recalculate depreciation,extension ofinventoryor sales,footing files,Confirmation Receivables se

12、lect/print,Scanning Unusual occurrences,duplicates,AnalyticalProcedures,FraudInvestigation,Not used for verbalinquiry orobservation,General controls,Segregation ofduties,Physical access,Documentation and systemsdevelopment policies andprocedures,Hardware controls,Datacontrol and security,General Con

13、trols,Administrationof the,IT function,Segregation of,IT duties,Systems,development,Physical and,onlinesecurity,Backupand,contingencyplanning,Hardware,controls,Segregationof Duties,SystemAnalyst,Programmer,Computer Operator,Librarian,Control Group,Physical Access,Controls over physical accessto:,Dat

14、a and program files,Computer Hardware,Separate andcontrolledaccess,Lockeddoors,passwords,security passes,check-in/outlogs,Physical andOnline Security,Physical Controls:,Keypadentrances,Badge-entrysystems,Security cameras,Security personnel,OnlineControls:,User ID control,Password control,Separate ad

15、d-on,security software,Documentation,Written policies and procedures,Operation instruction,Changes to programs,Systemdevelopment,Training ofnew employees,Auditor,Evaluation controls,Overview ofhow the system works,Hardware Controls,Thesecontrols arebuiltintocomputer,equipment bythe manufacturerto,de

16、tectand reportequipment failures.,Hardware Controls,Paritycheck-maintainsintegrityof internaldatawhen moved withincomputer,Echo check,echosdata transmitted back tosender to verifyintegrity,PreventativeMaintenance,Data Controls andSecurity,External Labels,Headerand TrailerLabels,File Security physical,offsite,File retention policies,grandfather-father-son,ApplicationControls,Inputcontrols,Processing,controls,Outputcontrols,RelationshipBetween General and AdministrativeControls,Cash Receipts,Appli