Gravity Ltd. is a medium-sized manufacturing company that is planning to implement a new digital system to streamline its production processes and…

Some examples of technology risks where Mr. Ravi should test the appropriate controls for relying on the digital systems Reliance on systems or programs that are inaccurately processing data, processing inaccurate data, or bothUnauthorized access to data that might result in destruction of data or improper changes to data, including the recording of unauthorized or non-existent transactions or inaccurate recording of transactions (specific risks might arise when multiple users access a common database)The possibility of information technology personnel gaining access privileges beyond those necessary to perform their assigned duties, thereby leading to insufficient segregation of dutiesUnauthorized or erroneous changes to data in master filesUnauthorized changes to systems or programsFailure to make necessary or appropriate changes to systems or programsInappropriate manual interventionPotential loss of data or inability to access data as requiredRisks introduced when using third-party service providersCybersecurity risks Mr. Ravi should focus on the following control considerations to mitigate risks effectively: Auditors should gain a holistic understanding of changes in the industry and the information technology environment to effectively evaluate management's process for initiating, processing, and recording transactions and then design appropriate auditing procedures.Auditors, as appropriate, should consider risks resulting from the implementation of new technologies and how those risks may differ from those that arise from more traditional, legacy systems.Auditors should consider whether digital upskilling or specialists are necessary to determine the impact of new technologies and to assist in the risk assessment and understanding of the design, implementation, and operating effectiveness of controls. E.g., cybersecurity control experts, IT specialists in the team etc.