WHAT IS A COMPUTERIZED INFORMATION SYSTEMS (CIS) ENVIRONMENT?
A computer information systems (CIS)1 environment is defined in International Standard on Auditing (ISA)
401 “Auditing in a Computer Information Systems Environment,” as follows: For purposes of International
Standards on Auditing, a CIS environment exists when a computer of any type or size is involved in the
processing by the entity of financial information of significance to the audit, whether that computer is
operated by the entity or by a third party. The introduction of all desired CIS controls may not be
practicable when the size of the business is small or when microcomputers are used irrespective of the size
of the business. Also, where data is processed by a third party, the consideration of the CIS environment
characteristics may vary depending on the degree of access to third party processing. A series of
International Auditing Practice Statements has been developed to supplement the following paragraphs.
This series describes various CIS environments and their effect on the accounting and internal control
systems and on auditing procedures.
WHAT ARE THE KEY COMPONENTS OF A CIS ENVIRONMENT?
A Computerized Information System (CIS) environment refers to the integration of computer systems,
software, hardware, and procedures that work together to collect, process, store, and disseminate
information within an organization. The key components of a Computerized Information Systems
environment typically include:
1. Hardware
• Input Devices: Devices used to enter data into the system, such as keyboards, scanners, and cameras.
• Output Devices: Devices that deliver processed data, such as monitors, printers, and speakers.
• Storage Devices: Hardware for storing data and programs, such as hard drives, SSDs, cloud storage, and
databases.
• Processing Units: Central Processing Units (CPUs) and Graphics Processing Units (GPUs) responsible for
performing computations and running software.
• Networking Equipment: Routers, switches, and modems to enable communication between devices and
systems.
2. Software
• System Software: The operating system (e.g., Windows, macOS, Linux) and utility programs that manage
hardware and allow other software to run.
• Application Software: Programs designed to perform specific tasks for users, such as word processors,
spreadsheets, and databases.
• Database Management Software (DBMS): Software that manages data storage, retrieval, and
manipulation within databases, like MySQL, Oracle, or SQL Server.
• Middleware: Software that connects different applications and systems, enabling them to communicate
and function together.
3. Data
• Data Input: Raw data collected from various sources (e.g., user input, sensors, transactions).
• Data Processing: The conversion of raw data into meaningful information through operations like sorting,
filtering, and computation.
• Data Storage: Organized storage of data in databases or file systems for later retrieval and use.
• Data Security: Measures to ensure data is protected from unauthorized access, loss, or corruption, including
encryption and access control.
4. People
• Users: Individuals who interact with the system, such as employees, customers, and other stakeholders.
• IT Staff: Technicians, developers, and system administrators responsible for maintaining and updating the
information systems.
• Management: Leaders who use the information systems for decision-making and strategic planning.
• Security Personnel: Specialists focused on ensuring the security and integrity of the information systems,
including threat detection and response.
5. Procedures
• System Development: The process of designing, developing, and implementing information systems,
including software development life cycle (SDLC) methods.
• Data Management Procedures: Guidelines for collecting, processing, and storing data, ensuring quality and
compliance with policies.
• Security Procedures: Rules and protocols to safeguard the system, such as backup protocols, data access
control, and incident response.
• Business Processes: The workflows and operational procedures that information systems automate or
support within an organization.
6. Networks
• Local Area Network (LAN): Internal network infrastructure for communication between computers within a
limited geographic area (e.g., a building).
• Wide Area Network (WAN): Network infrastructure that connects multiple LANs across larger geographic
areas, often over the internet.
• Cloud Computing: Cloud services (e.g., AWS, Azure, Google Cloud) that provide scalable computing
power and storage for systems that may need to scale or operate remotely.
7. Security Measures
• Firewalls: Software or hardware that filters incoming and outgoing traffic to protect the system from
unauthorized access.
• Encryption: Transforming data into a secure format to prevent unauthorized access, especially during
transmission or storage.
• Access Control: Authentication systems (e.g., passwords, biometrics) and authorization rules (e.g., role-
based access control) to restrict access to sensitive information.
8. Feedback and Monitoring
• Performance Monitoring: Tools to track the performance of the system, such as response times, uptime, and
usage statistics.
• Error Handling: Mechanisms for detecting, reporting, and responding to errors, whether in hardware or
software.
• Feedback Loops: Methods to gather feedback from users and stakeholders to improve and evolve the
system over time.
9. Integration and Interoperability
• APIs (Application Programming Interfaces): Protocols that allow different software systems to communicate
and work together.
• Data Integration: The process of combining data from different sources and ensuring that it can be used
cohesively.
• System Interoperability: Ensuring that different systems can work together and exchange data, such as
integrating enterprise resource planning (ERP) systems with customer relationship management (CRM)
tools.
In summary, the key components of a Computerized Information Systems environment include hardware,
software, data, people, procedures, networks, security, feedback mechanisms, and integration. These
elements work together to ensure that information is collected, processed, and delivered in an efficient,
secure, and reliable manner.
3. WHAT ARE THE UNIQUE CHARACTERISTICS OF A CIS ENVIRONMENT?
A Computerized Information System (CIS) Environment has several unique characteristics that distinguish it
from traditional manual systems. These characteristics enable CIS environments to enhance efficiency,
accuracy, and decision-making capabilities. Here are some of the key unique features:
1. Automation of Processes
• Automated Data Entry and Processing: Information systems automate the collection, processing, and
analysis of data, reducing human intervention and the risk of errors.
• Workflow Automation: Tasks such as approvals, notifications, and decision-making can be automated
through predefined rules, speeding up processes and improving consistency.
•
2. Real-Time Data Processing
• Instant Data Updates: In a computerized system, data is processed in real-time or near real-time, allowing
for quick decision-making and the ability to respond promptly to emerging situations.
• Immediate Access to Information: Users can retrieve and interact with up-to-date information at any given
moment without waiting for batch processing or manual updates.
•
3. Data Integration and Interoperability
• Seamless Integration: Computerized systems can integrate data from various sources (e.g., databases,
external systems, IoT devices), providing a holistic view of information across departments or processes.
• Interoperability: Different systems (e.g., CRM, ERP, HR management systems) can communicate with one
another using APIs or other data exchange mechanisms, allowing for efficient data sharing across the
organization.
4. Data Storage and Retrieval
• Centralized Data Storage: Data is stored in databases or cloud-based systems, making it accessible from
multiple locations and allowing for efficient management and backup.
• Quick Retrieval: Data retrieval is significantly faster in computerized systems due to the use of indexing,
search algorithms, and optimized database queries, in contrast to manual searching.
5. Scalability
• Easily Scalable: Computerized information systems can be scaled to accommodate increasing amounts of
data, users, or processing power without significant performance degradation. For example, cloud
computing allows for flexible scaling as needed.
• Resource Optimization: Resources like storage and processing power can be efficiently allocated based on
demand, ensuring optimal system performance.
6. Accuracy and Reliability
• Error Reduction: Computerized systems reduce human error by automating calculations, data entry, and
other repetitive tasks. The use of predefined rules and algorithms also ensures consistent decision-making.
• Data Integrity: Data consistency and accuracy are ensured through validation checks, automated
processes, and secure data management practices that minimize the risk of discrepancies.
7. Security Features
• Access Control: User access is controlled through authentication methods (e.g., passwords, biometrics,
two-factor authentication) to protect sensitive information from unauthorized access.
• Data Encryption: Sensitive data is encrypted during storage and transmission, ensuring it remains secure
from breaches and unauthorized interception.
• Audit Trails: CIS environments often maintain logs of user activity, providing an audit trail for security and
compliance purposes.
8. Decision Support
• Data Analysis and Reporting: Computerized information systems often include built-in tools for data analysis,
such as business intelligence (BI) tools, dashboards, and statistical models, to assist decision-makers in
making informed choices.
• Predictive Analytics: Advanced CIS can use historical data and algorithms to forecast trends, outcomes,
and potential risks, supporting proactive decision-making.
9. User Interface and Interaction
• Graphical User Interface (GUI): Many computerized systems have user-friendly GUIs that simplify
interactions with the system, making it easier for users to input, retrieve, and analyze information.
• Multi-User Access: Multiple users can interact with the system simultaneously from different locations,
promoting collaboration and efficiency in work processes.
10. Data Backup and Recovery
• Automatic Backups: Computerized systems often include automatic backup features to ensure that data is
securely stored and can be recovered in case of hardware failure, cyberattack, or other disruptions.
• Disaster Recovery Plans: Integrated disaster recovery mechanisms are built to quickly restore the system
and data in the event of a failure or disaster, ensuring business continuity.
11. Cost Efficiency
• Operational Cost Savings: By automating processes and improving data accuracy, computerized systems
reduce the time and resources needed for manual operations, leading to overall cost savings.
• Resource Allocation: Organizations can optimize their resource use (e.g., time, human resources, and
hardware) through better planning and system capabilities, leading to cost efficiency.
12. Remote Access and Mobility
• Cloud-Based Systems: Many modern CIS environments are cloud-based, which enables remote access to
information and applications from anywhere with an internet connection, enhancing flexibility and
mobility.
• Mobile Compatibility: Computerized information systems can be optimized for mobile devices, allowing
employees and users to access systems and data on the go.
13. Enhanced Collaboration
• Collaboration Tools: Computerized systems can include features like real-time messaging, file sharing, and
collaborative document editing, fostering teamwork among users in different locations.
• Integrated Communication: Email, video conferencing, and other communication methods are often
integrated into the system, allowing for smooth and immediate collaboration.
14. Customization and Flexibility
• Customizable Applications: Many computerized systems can be tailored to the specific needs of an
organization, whether through configurable settings, modules, or bespoke software development.
• Adaptability: CIS environments can evolve over time by integrating new technologies, such as AI, machine
learning, or new software modules, to meet the changing needs of the organization.
15. Documentation and Record Keeping
• Automatic Record Keeping: Information systems automatically maintain records of transactions,
communications, and activities, ensuring that proper documentation is available for audit and
compliance.
• Version Control: Many systems provide version control, so users can track changes to documents and data,
which helps maintain the integrity of records over time.
Conclusion:
The unique characteristics of a Computerized Information System (CIS) environment revolve around
automation, real-time processing, data integration, scalability, security, and decision support. These
features enable businesses and organizations to improve efficiency, minimize errors, enhance
collaboration, and make data-driven decisions in an increasingly digital world.
WHAT ARE THE THREE TYPES OF CIS ENVIRONMENT?
The three primary types of Computerized Information Systems (CIS) environments are often categorized
based on their functionality and the role they play in an organization. These are:
1. Transaction Processing Systems (TPS)
• Purpose: A Transaction Processing System is designed to handle large volumes of routine, repetitive
transactions that are essential to the operation of an organization. These systems automate the collection,
storage, and processing of transaction data.
• Characteristics:
• Real-Time Processing: TPS processes transactions immediately as they occur (e.g., sales, inventory updates).
• Data Integrity: Ensures data consistency and accuracy during each transaction.
• High Availability: TPS systems are designed to be continuously available since they are critical to day-to-
day operations.
• Examples:
• Point of Sale (POS) systems in retail stores.
• Banking systems for processing financial transactions.
• Order processing systems for e-commerce businesses.
2. Management Information Systems (MIS)
• Purpose: A Management Information System focuses on providing summarized, structured, and actionable
data to managers and decision-makers. It helps in decision-making by presenting regular reports and
supporting planning, control, and decision processes.
• Characteristics:
• Data Aggregation: MIS takes data from various sources, processes it, and creates reports (e.g., weekly sales
reports, monthly financial statements).
• Decision Support: Provides information to assist middle management in making routine decisions and
operational control.
• Structured Reports: Data is often presented in predefined formats (tables, charts, or graphs).
• Examples:
• Sales reports that summarize performance over specific periods.
• Inventory reports for monitoring stock levels.
• Budget reports for financial planning.
3. Decision Support Systems (DSS)
• Purpose: A Decision Support System is designed to help in more complex, non-routine decision-making,
typically involving unstructured or semi-structured problems. It provides support for decision-making by
analyzing large sets of data and generating simulations or forecasts.
• Characteristics:
• Interactive: DSS allows users to interact with the system, modifying variables and assumptions to see
different outcomes.
• Analytical Tools: It provides tools for analyzing data, performing "what-if" scenarios, and evaluating options.
• Data-Driven: DSS often integrates data from multiple sources, including internal databases and external
datasets, for comprehensive analysis.
• Examples:
• Financial modeling and forecasting systems used by executives.
• Risk assessment tools in project management.
• Strategic planning tools used for long-term decisions, such as market entry analysis.
Summary of the Three Types:
• Transaction Processing Systems (TPS): Focuses on day-to-day operational transactions (e.g., sales,
purchases).
• Management Information Systems (MIS): Focuses on summarizing transaction data to provide structured
reports for managers' decision-making.
• Decision Support Systems (DSS): Focuses on providing advanced tools for complex decision-making, often
using data analysis, simulations, and forecasting.
Each type serves a distinct role within an organization, supporting different levels of decision-making and
operational needs.
Compare and contrast a traditional accounting system to a Computerized Information System
environment.
Comparison of Traditional Accounting System vs. Computerized Information
System (CIS) Environment
A traditional accounting system and a Computerized Information System (CIS)
environment serve similar purposes in terms of processing financial data and supporting
decision-making. However, they differ significantly in terms of how they function, their
efficiency, scalability, and the complexity of their operations. Here's a detailed comparison:
1. Data Entry and Processing
• Traditional Accounting System:
• Manual Data Entry: All data must be entered manually, often by accountants or clerks,
into paper records or ledger books.
• Processing: Calculations and summarizations are done manually, which can be time-
consuming and prone to human error.
• Time-Consuming: Since most tasks are done by hand or with limited automation, the
process is slower, especially for larger volumes of transactions.
• Computerized Information System (CIS) Environment:
• Automated Data Entry: Data is entered and processed automatically through digital
forms, data imports, and integration with other systems (e.g., bank accounts, POS
systems).
• Instant Processing: Transactions are processed in real-time, providing immediate results
and faster access to financial data.
• Reduced Errors: Automation minimizes human errors, and built-in checks and validation
rules help ensure data accuracy.
2. Data Storage and Retrieval
• Traditional Accounting System:
• Paper-Based Storage: In traditional systems, records are stored in physical forms
(ledgers, paper files, and folders).
• Manual Retrieval: Retrieving specific information can be slow and cumbersome,
requiring physical access to files and manual searching.
• Limited Accessibility: Access to records is often limited to physical locations or specific
individuals with access to the paper documents.
• Computerized Information System (CIS) Environment:
• Digital Storage: Data is stored electronically in databases, which makes it easier to
organize and manage large volumes of data.
• Fast Retrieval: Data can be retrieved in seconds using search functions, queries, and
automated reporting tools, significantly improving efficiency.
• Remote Access: With cloud-based systems or secure networks, authorized users can
access data from anywhere, improving flexibility.
3. Reporting and Financial Statements
• Traditional Accounting System:
• Manual Report Generation: Reports such as income statements, balance sheets, and
cash flow statements must be manually calculated and prepared by accountants.
• Limited Customization: Customizing reports to fit specific needs (e.g., forecasting,
scenario analysis) can be challenging and may require additional manual effort.
• Time-Intensive: Creating reports manually can take a considerable amount of time,
especially at the end of the accounting period or fiscal year.
• Computerized Information System (CIS) Environment:
• Automated Report Generation: Reports can be generated automatically with predefined
templates, allowing for timely and accurate financial statements.
• Advanced Customization: CIS environments offer greater flexibility for customizing
reports, incorporating different parameters, and even creating dynamic dashboards.
• Real-Time Reporting: Financial data is available in real-time, enabling instant access to
up-to-date reports without the delays of manual processes.
4. Efficiency and Speed
• Traditional Accounting System:
• Slow Processing: Due to the manual nature of data entry and calculation, tasks like
reconciling accounts or closing the books can take a long time.
• Labor-Intensive: High reliance on human effort means that tasks are not only time-
consuming but also resource-intensive in terms of labor costs.
• Computerized Information System (CIS) Environment:
• Fast and Efficient: Automation speeds up routine tasks like data entry, calculations, and
report generation, drastically reducing the time required to complete accounting
functions.
• Reduced Labor Costs: With automation, fewer personnel are needed to perform manual
tasks, reducing labor costs and freeing up resources for higher-value tasks.
5. Accuracy and Reliability
• Traditional Accounting System:
• Human Error: Manual entry and calculations are prone to errors, such as transcription
mistakes, miscalculations, or forgetting to update records.
• Data Integrity Risks: Errors can affect the integrity of the financial records, leading to
inaccurate financial reporting or compliance issues.
• Computerized Information System (CIS) Environment:
• Reduced Errors: Built-in validation rules, automated calculations, and consistent
processes reduce human error and improve the accuracy of data.
• Data Integrity: Digital systems ensure better data integrity, with automatic checks and
audit trails that allow for easy tracking of changes and updates.
6. Security
• Traditional Accounting System:
• Physical Security Risks: Paper records are vulnerable to theft, fire, or natural disasters.
Proper physical storage and protection measures must be taken to ensure security.
• Limited Access Control: Security of sensitive information is dependent on physical
access to the records, and tracking who has accessed them can be difficult.
• Computerized Information System (CIS) Environment:
• Digital Security: Computerized systems offer advanced security features like encryption,
multi-factor authentication (MFA), and access control mechanisms to protect data from
unauthorized access or cyber threats.
• Audit Trails: CIS can maintain digital audit logs that track user activity, making it easier to
monitor and secure financial information.
7. Scalability and Flexibility
• Traditional Accounting System:
• Limited Scalability: As the volume of transactions increases, manual processes become
harder to manage, and additional human resources may be needed to handle the
increased workload.
• Less Flexibility: Modifying the system to accommodate new accounting standards,
regulatory changes, or different business requirements can be cumbersome.
• Computerized Information System (CIS) Environment:
• Highly Scalable: Computerized systems can easily handle increasing amounts of data
without significant performance issues, and cloud systems offer virtually limitless
scalability.
• Flexible and Adaptable: CIS environments can quickly be adjusted to accommodate
changing regulations, new accounting standards, or evolving business needs with
minimal disruption.
8. Cost
• Traditional Accounting System:
• Lower Initial Cost: Traditional accounting systems, especially paper-based, often require
minimal initial investment, as they rely mostly on human labor and physical resources.
• High Operational Costs: Over time, the costs associated with labor, printing, storage,
and manual errors can add up.
• Computerized Information System (CIS) Environment:
• Higher Initial Investment: Setting up a computerized system requires upfront costs,
including purchasing software, hardware, and training employees.
• Long-Term Savings: Over time, a computerized system offers savings by reducing human
labor costs, minimizing errors, improving productivity, and enabling faster decision-
making.
Conclusion:
In summary, while both traditional accounting systems and computerized information systems
handle financial data, the CIS environment offers significant advantages in terms of speed,
accuracy, scalability, security, and efficiency. It automates much of the work involved in
accounting, making it easier to manage larger volumes of data, ensure data integrity, and provide
timely financial reporting. However, traditional accounting systems might still be suitable for
smaller organizations or those with limited budgets. For most modern businesses, a
computerized information system provides a more effective and sustainable solution for
managing financial data.