Conducting an Information Systems Audit

Slides:



Advertisements
Similar presentations
AUDITING : AN OVERVIEW. Auditing defined It is a critical and systematic examination or review of accounting reports, documents, records, procedures and.
Advertisements

Chapter 4 Risk Assessment McGraw-Hill/Irwin
Internal Control in a Financial Statement Audit
Chapter 13 Overall Audit Plan and Audit Program
Learning Objectives LO1 Describe the conceptual audit risk model and its components. LO2 Explain the usefulness and limitations of the audit risk model.
Learning Objectives LO5 Document an accounting system to identify key controls and weaknesses in order to assess control risk. LO6 Write key control tests.
The Islamic University of Gaza
Management Fraud and Audit Risk
CHAPTER 5 OVERVIEW OF THE AUDIT PROCESS Fall 2007 u Overview of the Audit Process u Assessing Audit Risk u Audit Objectives u Materiality u Audit Procedures.
13 OVERALL AUDIT PLAN AND AUDIT PROGRAM HOW MUCH AND WHAT KIND
Steps to understanding the ICS (ctrl envt, risk asst, ctrl activities, info and communication, monitoring) BUT FIRST, why do we (auditors) want to obtain.
Overall Audit Plan and Audit Program Chapter 13. Types of Audit Tests Procedures to obtain an understanding of internal control (Ch 10) Focused on understanding.
Overall Audit Plan and Audit Program
Chapter 12 Auditing the Human Resource Management Process McGraw-Hill/Irwin ©2008 The McGraw-Hill Companies, All Rights Reserved.
The Elements of Auditing. Types of Audit Evidence Real Evidence – Physical (eg. building, inventory) – Nonphysical (eg. goodwill, rights) Documentary.
Auditing A Risk-Based Approach To Conducting A Quality Audit
18- 1 © 2006 The McGraw-Hill Companies, Inc., All Rights Reserved. Chapter 18 Integrated Audits of Internal Control (For Public Companies Under Sarbanes-Oxley.
Internal Control in a Financial Statement Audit
Auditing Audit Planning and the Audit Program Chapter 10 Audit Planning and the Audit Program Chapter 10.
Learning Objectives LO1 Outline six general audit techniques for gathering evidence. LO2 Identify the procedures and sources of information auditors can.
Learning Objectives LO1 Distinguish between management and auditor’s responsibilities regarding an auditee organization’s internal controls. LO2 Explain.
©2003 Prentice Hall Business Publishing, Essentials of Auditing 1/e, Arens/Elder/Beasley Overall Audit Plan and Audit Program Chapter 10.
Financial Audit Autonomous Bodies Internal Control and Risk Assessment Session Internal Control and Risk Assessment.
Copyright © 2006 by The McGraw-Hill Companies, Inc. All rights reserved. McGraw-Hill/Irwin 12-1 Chapter Twelve Auditing the Human Resource Management Process.
Advanced Auditing Materiality and the Audit Risk Model
1 CHAPTER 10 Overall Audit Plan and Audit Program.
Chapter 5 Internal Control over Financial Reporting
©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley Overall Audit Plan and Audit Program Chapter 12.
Audit Risk. "Audit risk" means the risk that the auditor gives an inappropriate audit opinion when the financial statements are materially misstated Audit.
Internal Control in a Financial Statement Audit
Chapter 05 Audit Evidence and Documentation McGraw-Hill/IrwinCopyright © 2014 by The McGraw-Hill Companies, Inc. All rights reserved.
©2006 Prentice Hall Business Publishing, Auditing 11/e, Arens/Beasley/Elder Overall Audit Plan and Audit Program Chapter 13.
Evaluation of Internal Control System
©2003 Prentice Hall Business Publishing, Auditing and Assurance Services 9/e, Arens/Elder/Beasley Overall Audit Plan and Audit Program Chapter 13.
McGraw-Hill/Irwin © The McGraw-Hill Companies 2010 Audit Planning and Types of Audit Tests Chapter Five.
Slide4.11 Learning Objectives Illustrate risk model Determine level of OAA Identify risks Calculate detection risk.
Chapter 6 Internal Control in a Financial Statement Audit Copyright © 2014 McGraw-Hill Education. All rights reserved. No reproduction or distribution.
Auditing: The Art and Science of Assurance Engagements Chapter 7: Materiality and Risk Copyright © 2011 Pearson Canada Inc.
©2008 Prentice Hall Business Publishing, Auditing 12/e, Arens/Beasley/Elder Overall Audit Plan and Audit Program Chapter 13.
Copyright © 2006 by The McGraw-Hill Companies, Inc. All rights reserved. McGraw-Hill/Irwin 6-1 Chapter Six Internal Control in a Financial Statement Audit.
BA 427 – Assurance and Attestation Services Lecture 21 Tests of Controls.
OVERVIEW THE AUDIT PROCESS Overview of the Audit Process.
Chapter 5 Evidence and Documentation McGraw-Hill/IrwinCopyright © 2012 by The McGraw-Hill Companies, Inc. All rights reserved.
Copyright © 2007 Pearson Education Canada 1 Chapter 11: Overall Audit Plan and Audit Program.
Chapter 3 The Audit Process. Overview of Audit Process Developing an Understanding with the Client Financial statement engagements Audits Compilations.
CHAPTER 8 MATERIALITY AND RISK. MATERIALITY THE MAGNITUDE OF AN OMISSION OR MISSTATEMENT…THAT MAKES IT PROBABLE THAT THE JUDGMENT OF A REASONABLE PERSON.
Copyright © 2007 Pearson Education Canada 9-1 Chapter 9: Internal Controls and Control Risk.
1 Overview of PCAOB Auditing Standard No. 5 An Audit of Internal Control Over Financial Reporting that is Integrated with an Audit of Financial Statements.
Modern Auditing: Assurance Services and the Integrity of Financial Reporting, 8th Edition William C. Boynton California Polytechnic State University at.
McGraw-Hill/Irwin © The McGraw-Hill Companies 2010 Auditing the Human Resource Management Process Chapter Twelve.
OVERALL AUDIT PLAN AND AUDIT PROGRAM
The Audit Risk Model Lanfei Gao, Michael Andrews, and Shanaka DeSilva,
©2012 Prentice Hall Business Publishing, Auditing 14/e, Arens/Elder/Beasley Overall Audit Plan and Audit Program Chapter 13.
McGraw-Hill/Irwin © The McGraw-Hill Companies 2010 Internal Control in a Financial Statement Audit Chapter Six.
 Planning an audit of cost statements, records and other related documents is considered necessary to ensure achievement of audit objectives with available.
Internal Control in a Financial Statement Audit
Internal Audit & Accounting Systems Review
Audit Risk The risk that an auditor will give an inappropriate audit opinion when the financial statements are materially misstated.
Question 4-1 Which of the following statements concerning noncompliance by clients is correct?    A.  An auditor's responsibility to detect noncompliance.
PLANNING, MATERIALITY AND ASSESSING THE RISK OF MISSTATEMENT
Modern Auditing: Assurance Services and the Integrity of Financial Reporting, 8th Edition William C. Boynton California Polytechnic State University at.
Assessing the Risk of Material Misstatement
Modern Auditing: Assurance Services and the Integrity of Financial Reporting, 8th Edition William C. Boynton California Polytechnic State University at.
Prof. Joshua Onome Imoniana
Modern Auditing: Assurance Services and the Integrity of Financial Reporting, 8th Edition William C. Boynton California Polytechnic State University at.
Chapter 13 Overall Audit Plan and Audit Program
Modern Auditing: Assurance Services and the Integrity of Financial Reporting, 8th Edition William C. Boynton California Polytechnic State University at.
Chapter 13 Overall Audit Plan and Audit Program
AUDIT TESTS.
Presentation transcript:

Conducting an Information Systems Audit Chapter 2

Dealing with Complexity The Nature of Controls Preventive control Detective control Corrective control Dealing with Complexity Given the purposes of the IS audit, factor the system to be evaluated into subsystems. Determine the reliability of each subsystem and the implications of each subsystem’s level of reliability for the overall level of reliability in the system.

Decomposition of the information systems function IS Function Management systems Cycles Application systems Management subsystems Application subsystems

Management Subsystem : - Top management - IS management - Systems development management - Programming management - Data administration - Quality assurance management - Security administration - Operations management

Application Subsystems : - Boundary - Input - Communication - Processing - Database - Output Assessing Subsystem Reliability

Audit Risks Audit risk model for the external audit function : DAR = IR x CR x DR DAR = Desired audit risk IR = inherent risk CR = control risk DR = detection risk

Types of Audit Procedures Procedures to obtain an understanding of controls Tests of controls Substantive tests of details of transactions Substantive tests of details of account balances Analytical review procedures

Auditors can use similar types of procedures if they are concerned with evaluating the effectiveness and efficiency of organization’s operation : Procedures to obtain an understanding of controls Tests of controls Substantive tests of details of transactions Substantive tests of overall results Analytical review procedures

Overview of Steps in an Audit Planning The Audit Start Rely on Controls ? no Preliminary Audit work Yes Tests of controls Obtain Understanding Of control structure Reassess Control risk Assess control risk Extended Substantive testing Still Rely on Control ? no Form audit Opinion and Issue report yes Increase Reliance on Controls ? no Stop Limited Substantive testing yes

Tests of controls Tests of transactions Tests of balances or overall results Completion of the audit Auditing Around or Through The Computer Auditing around the computer Auditing through the computer