Focus Ltd. is a manufacturing company that is planning to implement a new digital system to streamline its production processes and improve…
CA Final · Advanced Auditing, Assurance and Professional Ethics · MTP · May 2025
Focus Ltd. is a manufacturing company that is planning to implement a new digital system to streamline its production processes and improve efficiency. The company appointed Mr. Raman as IT manager. However, he is aware that merging technologies can bring significant benefits but also pose various risks to the organisation. In this context, he needs to identify examples of technological risks associated with the implementation of the new digital system and the control considerations necessary to mitigate these risks effectively.
Suggested Answer and Working Notes:
Some examples of technology risks where Mr. Raman should test the appropriate controls for relying on the digital systems: Reliance on systems or programs that are inaccurately processing data, processing inaccurate data, or both.Unauthorized access to data that might result in destruction of data or improper changes to data, including the recording of unauthorized or non-existent transactions or inaccurate recording of transactions (specific risks might arise when multiple users access a common database).The possibility of information technology personnel gaining access privileges beyond those necessary to perform their assigned duties, thereby leading to insufficient segregation of duties.Unauthorized or erroneous changes to data in master files.Unauthorized changes to systems or programs.Failure to make necessary or appropriate changes to systems or programs.Inappropriate manual intervention.Potential loss of data or inability to access data as required.Risks introduced when using third-party service providers.Cybersecurity risks. Mr. Raman should focus on the following control considerations to mitigate risks effectively: Auditors should gain a holistic understanding of changes in the industry and the information technology environment to effectively evaluate management's process for initiating, processing, and recording transactions and then design appropriate auditing procedures.Auditors, as appropriate, should consider risks resulting from the implementation of new technologies and how those risks may differ from those that arise from more traditional, legacy systems.Auditors should consider whether digital upskilling or specialists are necessary to determine the impact of new technologies and to assist in the risk assessment and understanding of the design, implementation, and operating effectiveness of controls. E.g., cybersecurity control experts, IT specialists in the team etc.
Topics: Digital Auditing & Assurance
Related Questions in this Topic
- PQR Ltd., a company maintaining its books of account through an ERP-based accounting system is required to comply with t...
- ABC Ltd., a listed company, allows employees to access the company's systems through laptops and mobile devices. During ...
- The following are standalone Multiple Choice Questions from Part I of the paper.
- Moby Manufacturing Ltd. has substantially automated its accounting and production processes. During the audit of the fin...
- CA Jiya was conducting a remote audit of Nova Ltd. using an online document-sharing platform. To expedite the audit proc...