Audit in CIS - Introduction
Audit in CIS - Introduction
Introduction :
Nowadays, there is growing use of computers in business organisations for storage and
processing of accounting records and other information. This has revolutionized the
functioning of the organisation, its accounting and administrative controls, flow of
information and preparation of financial statements. As a result, the auditor has to acquire
adequate knowledge of computer-based accounting system to perform his job.
Auditing in Computer Information System (CIS), environment, the CIS or EDP exists
when any organisation uses one or more computer(s) of any type or size for preparation
of financial statements. A client has Computer Information System (CIS) or Electronic
Data Processing (EDP), when there is computerization of his accounts. It is immaterial
whether the staff of the client himself does the processing and generation of financial
statements on computers or an outside agency.
The Computer Information System (CIS) does not change the objective and scope of an
audit, but it certainly changes the way of processing, storage, retrieval and
communication of financial information.
In Computer Information System (CIS), on the other hand, there are often no transaction
creating documents and no visible transaction trail. For example if there is direct feeding
of data into the computer, there may not be any physical input documents e.g. voucher,
invoice, receipt, etc. and no transaction trail. Therefore, to assess how Computer
Information System (ClS) may influence the audit examination process, he should
consider the availability of data (a) entered in computer (b) retained in data files and (c)
generated for outputs. The data may be available only in machine-readable form and
accessible only for a brief period. In such a case, the auditor needs to request the client to
retain particular data for examination. This is because invisibility of information is likely
to increase the possibility of hidden errors as compared to manual system where such
errors are visible.
3) Uniform Processing
Under computer processing,. there is uniform processing of similar transactions with
same processing instructions or programme. This decreases the risk of human errors like
calculation mistakes but programming error may result in incorrect processing of all
transactions.
6) Analytical Tools
Computer Information System (CIS) generates a variety of analytical tools. These may be
useful in reviewing and supervising the operations of the client. These will also go to
improve the internal control structure.
7) Effective Supervision
Computer Information System (CIS) enables management to enforce effective
supervision over operations. Analytical tools of Computer Information System (CIS) only
go to make this easier. The Auditor can apply computerised auditing tools to ensure audit
efficiency. EDP systems contain built-in software and hardware controls that are more
effective than manual controls.
AUDIT IN CIS ENVIRONMENT
Computer is used in auditing procedure. They work to the advantage of auditing in the
following ways:
1) More Reliable
A computer works as programmed. If the programming has taken into account all
possible circumstances, the computer will work more reliably and consistently than the
manual system. In manual system, the auditor may undertake detailed checking of a
number of transactions, yet certain errors and fraud may remain undiscovered. It is not so
in the Computer Information System (CIS) environment. The auditor has only to see
whether there is effective international control on programme and, if so, checking of
certain significant or unusual transactions will ensure accuracy in accounting.
3) Automatic Updating:
Computers facilitate automatic updating of all relevant computer files by a single
transaction. For example, purchase of raw materials from a single supplier will update the
accounts of the supplier, purchases and inventory. In manual system, different individuals
will need to update the relevant files under their charge. Likewise, with proper
programming, certain tasks can be performed without human intervention. For example
generation of monthly accounts in case of customers will remove the need for manual
preparation of accounts in individual cases.