Notes in AuditingCIS
Notes in AuditingCIS
Overview
With the rapid development in technology in recent years, computer information systems (CIS)
have become feasible, perhaps essential, for use even in small scale of business operations.
Almost all entities now use computer to some in their accounting systems.
This widespread use of computers has offered new opportunities for professional accountants
and has also created some challenging problems to auditors.
Regardless of the extent of computerization of the methods of data processing being used, the
responsibility for the establishment and implementation of appropriate internal control systems
rests with management and those charged with governance.
The auditor’s responsibility is to obtain an understanding of the entity’s internal control system
to be able to assess control risk and determine the nature, timing and extent of tests to be
performed.
Consistency of Performance
Data and computer programs may be Data cannot be altered since data was
accessed and altered by unauthorized manually made by the authorized
persons leaving no visible evidence. personnel.
It is also important that appropriate
controls are incorporated to the system to
limit the access to data authorized
personnel.
Concentration of Duties
Certain transactions may be initiated by Source documents are still needed in order
the CIS itself without the need for an input for the data to be processed in the system.
document.
The information on the computer can be The records are written in ink on
easily changed, leaving no trace of the substantial paper. The only way to lose the
original content. information is to lose or to destroy the
physical records.