tailieunhanh - Lecture Auditing and assurance services (6/e) - Module H: Auditing and Information Technology

After studying this chapter you will be able to understand: Issues introduced in a IT environment, impact of automated transaction processing on the evaluation of I/C, types of computer controls, categories of general controls, program development controls, program change controls, processing controls,. | Auditing & Assurance Services, 6e Module H Auditing and Information Technology "To err is human, but to really foul things up you need a computer.“ --Paul Ehrlich, American biologist, author, and technology commentator “A common mistake people make with trying to design something completely foolproof is to underestimate the ingenuity of complete fools.” --Douglas Adams , author of The Hitchhiker’s Guide to the Galaxy Mod H-2 2 Issues Introduced in a IT environment Input errors Systematic vs. random processing errors Lack of an audit trail Inappropriate access to computer files and programs Reduced human involvement in processing transactions Mod H-3 Impact of Automated Transaction Processing on the Evaluation of I/C Phase Effect(s) Understanding Understand and document controls related to automated processing of transactions Assessment Consider controls related to automated processing of transactions in preliminary assessment of control risk Testing Identify , test, and evaluate degree of compliance of controls related to automated processing of transactions Mod H-4 Types of Computer Controls General Controls Relate to all applications of an accounting information system (pervasive) Deficiencies will affect processing of various types of transactions Automated Application Controls Relate to specific business activities Directly address management assertions Mod H-5 5 Categories of General Controls Program development controls Program change controls Computer operations controls Access to programs and data controls Mod H-6 Program Development Controls Acquisition and development of new programs is properly authorized and conducted with organization policies Appropriate users participate in process Programs and software are tested and validated prior to use Programs and software have appropriate documentation Mod H-7 Systems Development Life Cycle Identify Requirements Feasibility Analysis Determine System Specifications Develop Programs Design Procedures System . | Auditing & Assurance Services, 6e Module H Auditing and Information Technology "To err is human, but to really foul things up you need a computer.“ --Paul Ehrlich, American biologist, author, and technology commentator “A common mistake people make with trying to design something completely foolproof is to underestimate the ingenuity of complete fools.” --Douglas Adams , author of The Hitchhiker’s Guide to the Galaxy Mod H-2 2 Issues Introduced in a IT environment Input errors Systematic vs. random processing errors Lack of an audit trail Inappropriate access to computer files and programs Reduced human involvement in processing transactions Mod H-3 Impact of Automated Transaction Processing on the Evaluation of I/C Phase Effect(s) Understanding Understand and document controls related to automated processing of transactions Assessment Consider controls related to automated processing of transactions in preliminary assessment of control risk Testing Identify , test, and evaluate .

• Kế toán - Kiểm toán
• Assurance services
• Processing controls
• Information Technology
• Program development controls
• Program change controls
• Lecture Auditing and assurance services
• Assurance services profession
• Auditing services
• Audit process
• Assurance framework
• Accounting information
• Financial statement audit
• Auditing and assurance services
• Auditing environment
• Professional standards
• Auditing standards
• Financial statement auditing
• Auditing business processes
• Auditing internal control
• Internal auditing services
• Contemporary auditing environment
• Attestation engagements
• Account balances
• Structure of the profession
• Audit firms
• Corporate governance
• Professional ethics
• Legal liability
• Liability to clients
• Financial repport audit process
• Financial report assertions
• The business
• Strategic business risk
• Inherent risk assessment
• Inherent risk
• Internal control structure
• Assessing control risk
• Tests of controls
• Sales cycle
• Substantive tests
• Substantive tests of transactions
• Audit sampling
• Sampling theory
• Adjusting events
• Financial report
• Auditor’s reporting obligations
• Professional reporting obligations
• Prospective financial information
• Highlight information
• Institute of internal auditors
• Government accounting
• Reporting duties