MNC Limited, is engaged in manufacture & sale of FMCG products. It has manufacturing locations across various states in India and engages dealer…
CA Final · Advanced Auditing, Assurance and Professional Ethics · PYQS · May 2024
MNC Limited, is engaged in manufacture & sale of FMCG products. It has manufacturing locations across various states in India and engages dealer channels to sell it products. One dealer is appointed for each district within the state and products are despatched from the nearest manufacturing location to the dealer. Considering the voluminous transactions, MNC Limited has a robust ERP network, for recording the transactions. As statutory auditors of MNC Ltd., your firm is about to commence the current year audit. The audit team includes certain IT experts and discussions are underway amongst the team members. As an IT manager of the engagement team, explain the key areas for an auditor to understand IT environment.
Suggested Answer and Working Notes:
Key Areas for an Auditor to Understand IT Environment: Key Areas for an Auditor to Understand IT Environment are as follows: 1. Understand the flow of transaction: The auditor's understanding of the IT environment may focus on identifying and understanding the nature and number of the specific IT applications and other aspects of the IT environment that are relevant to the flows of transactions and processing of information in the information system. Changes in the flow of transactions, or information within the information system may result from program changes to IT applications, or direct changes to data in databases involved in processing or storing those transactions or information. 2. Identification of Significant Systems: The auditor may identify the IT applications and supporting IT infrastructure concurrently with the auditor's understanding of how information relating to significant classes of transactions, account balances and disclosures flows into, through and out the entity's information system. 3. Identification of Manual and Automated Controls: An entity's system of internal control contains manual elements and automated elements (i.e., manual, and automated controls and other resources used in the entity's system of internal control). An entity's mix of manual and automated elements varies with the nature and complexity of the entity's use of IT. The characteristics of manual or automated elements are relevant to the auditor's identification and assessment of the risks of material misstatement. 4. Identification of the technologies used: The need to understand the emerging technologies implemented and the role they play in the entity's information processing or other financial reporting activities and consider whether there are risks arising from their use. Given the potential complexities of these technologies, there is an increased likelihood that the engagement team may decide to engage specialists and/or auditor's experts to help understand whether and how their use impacts the entity's financial reporting processes and may give rise to risks from the use of IT. 5. Assessing the complexity of the IT environment: Not all applications of the IT environment have the same level of complexity. The level of complexity for individual characteristics differs across applications. Complexity is based on the following factors – automation used in the organization, entity's reliance on system generated reports, customization in IT applications, business model of the entity, any significant changes done during the year and implementation of emerging technologies. After considering the above factors for each application the over complexity is assessed of the IT environment.
Topics: Digital Auditing & Assurance
Related Questions in this Topic
- PQR Ltd., a company maintaining its books of account through an ERP-based accounting system is required to comply with t...
- ABC Ltd., a listed company, allows employees to access the company's systems through laptops and mobile devices. During ...
- The following are standalone Multiple Choice Questions from Part I of the paper.
- Moby Manufacturing Ltd. has substantially automated its accounting and production processes. During the audit of the fin...
- CA Jiya was conducting a remote audit of Nova Ltd. using an online document-sharing platform. To expedite the audit proc...