Computer Assisted Audit Tools And Techniques, Data Structures And Auditing The Revenue Cycle

| “Security controls are the management, operational, and technical safeguards or countermeasures employed within an organizational information system to protect the confidentiality, integrity, and availability of the system and its information” (NIST SP 800, 2009). The control allows the organization to efficiently mitigate the risk coming from the use of information System (IS) to conduct business operations and processes.

2) (1 point) What kind of control is this control procedure – a preventive or detective control? Explain.

Using the tables from Task 1, design and implement suitable data entry forms which incorporate features to ensure the validity and integrity of data. You must include the following:

The primary reason for relying on controls is to lower the amount of substantive testing, therefore lowering the cost of the audit. If the auditor believes he can rely on the internal controls, then he will lower the amount of substantive testing.

Application Controls are more specific and are often more unique to each organization and make sure that the accurate data is processed for the organization. These controls are input, processing, and output. Input controls which is just like a fact checker and make

Data validation is the process of testing the validity of data in accordance with the protocol specifications. Edit check programs are written to identify the discrepancies in the entered data, which are embedded in the database, to ensure data validity. The beneficiary will write the program according to the logic condition mentioned in the DVP. These edit check programs are initially tested with dummy data containing discrepancies by the beneficiary. Discrepancy is defined as a data point that fails to pass a validation check. Discrepancy may be due to inconsistent data, missing data, range checks, and deviations from the protocol. These discrepancies will be answered by investigator after logging into

22.   If a point on a control chart falls outside one of the control limits, this suggests that the process output is non-random and should be investigated. TRUE

Each of the five components of an internal control system is important. Let us focus on the control activities. These activities are the backbone of the company’s efforts to address the risks it faces, such as fraud. The specific control activities used by a company will vary depending on management’s assessments of the risks faced. The six principles of control activities are as follows:

They establish controls in the early stages of a system that will ensure quality is controlled

Input controls are an integral part in any form. Allows the user to perform a variety of functions, for example, enter text, select items from a list, load a file, etc. Data entry checks ensure accuracy, completeness and timeliness of data during the conversion from the source Original electronic data, or entry into a computer application. Data can be imported into an application computer is online or manual enrollment plan to automated processing. Control of entry Critic should determine the adequacy of both automatic and manual controls on data entry to ensure that the data is entered accurately the optimal use of electronic validation and processing procedures and treatment facilitate timely and accurate resubmission all data errors corrected. Examples of input controls are error events, field checks, limit checks, tips for self-control, the sequence controls, validation controls, key

Subcategories of application controls include input controls, processing controls, and output controls. The General controls include controls over IT governance, infrastructure, network & operating system security, database access, application acquisitions & development, and program changes. “General controls are needed to support the environment in which application controls function, and both are needed to ensure accurate financial reporting, as well as reduce instances of fraudulent activity.” (Hall 2013)

This information is also used to improve performance through control action, for example: correcting problems.

Controls are measuring sticks to see if the desired goals are being met. Successful managers create parameters for their employees and implement controls within a criteria to confirm if the job is being done to standard. Case in point, I give quarterly performance counseling’s to each subordinate in my department on performance, being efficient at the job and using problem solving techniques. Controls to an extent border along the lines of micromanaging, but it can also be used to emphasize how well the subordinate is doing too. All quarterly counseling’s are not corrective in nature, but it is a great assessment tool for exceptional job performance as well. The usage of controls is part of my responsibility as a supervisor to ensure the goals are being achieved to standard.

A good control system provides timely information to the manager which is very much useful for taking various decisions. Control simplifies supervision by pointing out the significant deviations from the standards of performance. It keeps the subordinates under check and brings discipline among them.

Essentially, the focus should be on elements that promote the control of data accuracy and quality for the sake of protecting users entering details on the pages. Without user controls, it is likely that the implementation of data integrity while filling out forms would be impossible. In addition, they help in the evaluation of data saved in databases, as they ensure that all elements are presented in the same format. Presentation of data in a similar format makes it simpler to assess and ensure that data compiled is homogenous in nature. Finally, the validation rules and check routines utilized in input control functions ensure that data entered in a system is correct and meaningful (Perspective Pixel Inc., 2014). Such processes guarantee that data presented by users filling a form make sense and is of a rich quality to the organization in need of the data values entered.