Top Banner
Session 8.1 1 EDP Audit Presentation By: R.T.I. JAIPUR
41
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 1

EDP Audit

Presentation By:R.T.I. JAIPUR

Page 2: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 2

The Era of Computers

Greatest achievement of scientific & technological development.Increased application of computers and IT in accounting operations.

Page 3: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 3

Significant Trends

Development of IT based networks largely powered by the development of Internet, Intranet, Telecom and network computers.More efficient information storage.Emergence of object oriented tools for system development.Transactions are processed and received electronically.

Page 4: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 4

Significant Trends

Expert and Automated Management systems.Growth of mobile PC’s.Development of new and improved security measures.

Page 5: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 5

Characteristics of an EDP environment

Organizational structureAbsence of Input documentsLack of visible Audit trailLack of visible outputEasy access to data and programsConsistent performanceProgrammed controls

Page 6: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 6

Computer frauds

Financial fraudsProperty fraudsInformation theftTheft of servicesVandalism of equipmentDestruction of records

Page 7: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 7

Internal controls

General EDP controlsEDP application controls

Page 8: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 8

Auditing in EDP Environment

When auditing under EDP system, auditors are not supposed to change audit objectives or auditing scopes set by auditing programs but are supposed to analyze the impact on auditing caused by IT and adopt some new auditing methodology.

Page 9: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 9

Auditing in EDP Environment

The change of the Auditees.Changed nature of wrongdoings and frauds. For example:-– Permitting people to deal with economic and accounting

affairs anonymously.– Allowing modification of accounting data without authorization

or modification of accounting data without documentation of the modification.

– Allowing unauthorized visitors.– Hiding or carrying out some invisible operations.

Page 10: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 10

Auditing in EDP Environment

Changes of Auditing evidence.Changes of working papers.

Page 11: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 11

Audit risks in EDP Environment

Visible Audit Clues may disappear naturally.– In manual accounting system, every step in

accounting circle is verified by paper recording and concerned signatures leaving visible and clear audit clues.

– In IT environment paper information is altered into magnetic codes therefore traditional audit evidence no longer exists.

Page 12: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 12

Audit risks in EDP Environment

Electronic accounting data are liable to be misused, distorted or lost.– In manual accounting system, paper information can

be easily identified and sourced.

Lack of original journals.Lack of Original evidence.

Page 13: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 13

Audit risks in EDP Environment

Great variety of accounting software & security protocols make auditing more difficult.Risks on Internal Controls.– In manual accounting, internal control stressed staff

controlling. Employee responsibility system are clearly defined while in IT environment, Internal controls consist of both staff and computer management, with the latter drawing more attention.

Page 14: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 14

Audit risks in EDP Environment

Abnormal accounting errors become possible.Risks in Audit Process.– Version updating.– Difficult to trace historic data.

Page 15: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 15

Preventive Methods

Reforming Audit Techniques and Methodology.Uses of CAATsImproving Preliminary and Follow up Audit on IT System.

Page 16: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 16

Preventive Methods

Strengthening Audit on Internal Controls and urging Audited Entities to establish and improve the Internal Control System in EDP Environment. Enhancing the training of Auditors.Speeding up the development of Software.

Page 17: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 17

Uses of CAATs

        Tests of details of transactions and balances;         Analytical review procedures        Compliance tests of EDP controls

Page 18: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 18

Considerations in the use of CAATs

Computer Knowledge, Expertise and Experience of the Auditor Availability of CAATs and Suitable Computer Facilities

Timing Documentation

Page 19: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 19

Types of CAATs

CAATs used to validate processes in programs Program review Code comparison Parallel simulation Test data The Trace

Page 20: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 20

. CAATs used to analyse data files

File interrogation software Generalised audit software Industry specific interrogation software SCARF

Page 21: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 21

Summary  Reforming audit techniques and methodology, Improving preliminary and follow up audit on IT System,  Establishing a unified audit data channel,Strengthening audit on internal controls and urging audited entities to establish and improve the internal control system in IT Environment,  Enhancing the training of auditors; and Speeding up the development of audit software.

Page 22: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 22

I D E A

Page 23: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 23

IDEA- Introduction

Interactive Data Extraction and AnalysisA comprehensive CAAT Developed by Office of Auditor General of CanadaHelpful for Auditors, Financial Managers, Investigators and Accountants

Page 24: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 24

IDEA- Introduction…

display, analyse, manipulate, sample or extract from data files from almost any source - mainframe to PC, including reports printed to a file Lower audit cost, enhance the quality to work and take on new roles by putting the power of IDEA

Page 25: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 25

Functions of IDEA

Import data from wide range of file typesPerform analysis of data including comprehensive statistics, profiles, summaries and ageingConducts extensive tests with 70 functionsPerform calculationsTests for gap in sequence or duplicate data

Page 26: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 26

Functions of IDEA….

Sampling : Random, Systematic, Monetary

Match or compare different files

Page 27: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 27

Downloading the Data

5 stages– Planning– Requesting the Data– Performing the Transfer– Importing the Data– Checking the Data

Page 28: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 28

Downloading the Data

Planning: discussion with user and IT staff– File formats of different types

• Excel, Access, dBASE, Lotus etc• ODBC (Oracle, SQL etc)• ASCII files (American standard code for information

interchange)

Page 29: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 29

USE of IDEA

ImportImport almost any file type from almost any source, using IDEA's Import Assistant to guide you. For more complex files, variable length records or multiple record types, IDEA provides a companion product, Record Definition Editor (RDE). RDE can also be used to modify record definitions created and saved by the Import Assistant.

Page 30: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 30

USE of IDEA

ExtractExtractions, or exception testing, is the most frequently used function in IDEA, used to identify items which satisfy a specific characteristic, such as payments more than Rs10,000 or transactions before a given date. The extraction criteria are entered using the Equation Editor and all records satisfying the specified criterion are output to a new database. You can perform a single extraction on a database, or up to 50 separate extractions with a single pass through the database.

Page 31: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 31

USE of IDEA

Indexed Extraction allows you to limit the scope of data for which IDEA searches in the database. An indexed extraction saves time when reviewing large databases. You can select and index for the search, rather than have IDEA search through the entire database.

Page 32: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 32

USE of IDEA

@Functions@Functions are used to perform more complex calculations and exception testing. IDEA provides over 60 functions which can be used for date arithmetic, text manipulation and conversion and numerical, financial and statistical calculations. IDEA functions begin with the '@' symbol, very similar in style and operation to functions found in Microsoft Excel.

Page 33: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 33

USE of IDEA

AppendThe Append Databases option is used to append or concatenate two or more files into a single database for audit testing. For example, you may append 12 monthly payroll files to produce a database of all payroll transactions for the year. The database could then be summarized by Employee to produce year-to-date gross, net, tax, deductions, etc. Up to 32,768 files can be appended into a single database.

Page 34: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 34

USE of IDEA

GapsYou can search a file for gaps in numeric or date sequence, or alphanumeric sequences with a user defined mask. For date gaps, you can choose to ignore weekends or user specified holidays. Like many other IDEA functions, you can apply criteria before your search, e.g. look for gaps in check numbers, where the check amount is greater than Rs1,000. You can also modify the increment – look for gaps in multiples of 10, for instance.

Page 35: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 35

USE of IDEA

SortThe Sort option is used to create a new database physically sorted in the specified order. Sorting can significantly improve performance of certain functions

Page 36: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 36

USE of IDEA

ChartThe Chart Data option can be used to graph data files or test results, in bar, stacking bar, pie, plot or area charts. The Charting Assistant will guide you through the steps for creating a chart. Chart options include titles, 3D effects, legends, colors and patterns, and grid styles. Charts can be printed, saved to as a Bitmap file or copied into any other windows application via the clipboard.

Page 37: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 37

USE of IDEA

StratificationNumeric Stratification, Character Stratification and Date Stratification are powerful tools used to total the number and value of records within specified bands. Examples of use include analyzing items by postal code or alphanumeric product code or fixed assets by date of acquisition.

Page 38: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 38

USE of IDEA

SummarizationThe Quick Summarization function is used to accumulate the values of numeric fields for each unique key where there is a single field in the key. The Key Field Summarization function is used where there is a one or more fields in the key. Summarization results can be graphed and users can drill down on each unique key.

Page 39: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 39

USE of IDEA

SamplingIDEA offers four sampling methods together with the ability to calculate sample sizes based on parameters entered and evaluate the results of sampling tests. The sampling methods available are systematic (e.g. every 1000th record), random (number of items chosen purely at random), stratified random (a specified number of items selected randomly from within range bands), and monetary unit (e.g. every 1000th Rs or other monetary unit).IDEA also provides an Attribute Planning and Evaluation option which can be used to calculate sample sizes, confidence levels, error limits and number of sample errors. These calculations are used to plan and then evaluate the results of the samples.

Page 40: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 40

USE of IDEA

Satisfy financial statement – Accuracy – checking totals and calculations

Analytical Review – comparisons, profiling, stratifying Validity – duplicates, exceptions, statistical samples Completeness – gaps and matches Cut-off – date and number sequence analysisValuation –inventory provisions

Page 41: Session 8.11 EDP Audit Presentation By: R.T.I. JAIPUR.

Session 8.1 41

Thank You