Focus Ltd. is a manufacturing company that is planning to implement a new digital system to streamline its production processes and improve…

CA Final · Advanced Auditing, Assurance and Professional Ethics · MTP · May 2025
Focus Ltd. is a manufacturing company that is planning to implement a new digital system to streamline its production processes and improve efficiency. The company appointed Mr. Raman as IT manager. However, he is aware that merging technologies can bring significant benefits but also pose various risks to the organisation. In this context, he needs to identify examples of technological risks associated with the implementation of the new digital system and the control considerations necessary to mitigate these risks effectively.

Suggested Answer and Working Notes:

Some examples of technology risks where Mr. Raman should test the appropriate controls for relying on the digital systems: Reliance on systems or programs that are inaccurately processing data, processing inaccurate data, or both.Unauthorized access to data that might result in destruction of data or improper changes to data, including the recording of unauthorized or non-existent transactions or inaccurate recording of transactions (specific risks might arise when multiple users access a common database).The possibility of information technology personnel gaining access privileges beyond those necessary to perform their assigned duties, thereby leading to insufficient segregation of duties.Unauthorized or erroneous changes to data in master files.Unauthorized changes to systems or programs.Failure to make necessary or appropriate changes to systems or programs.Inappropriate manual intervention.Potential loss of data or inability to access data as required.Risks introduced when using third-party service providers.Cybersecurity risks. Mr. Raman should focus on the following control considerations to mitigate risks effectively: Auditors should gain a holistic understanding of changes in the industry and the information technology environment to effectively evaluate management's process for initiating, processing, and recording transactions and then design appropriate auditing procedures.Auditors, as appropriate, should consider risks resulting from the implementation of new technologies and how those risks may differ from those that arise from more traditional, legacy systems.Auditors should consider whether digital upskilling or specialists are necessary to determine the impact of new technologies and to assist in the risk assessment and understanding of the design, implementation, and operating effectiveness of controls. E.g., cybersecurity control experts, IT specialists in the team etc.

Topics: Digital Auditing & Assurance

Open in Interactive Practice Hub · Full Practice Hub · Chapter Weightage · More in this subject

Related Questions in this Topic