INFORMATION SYSTEMS AUDIT

Code Cours
2324-IÉSEG-M1S1-ACC-MA-EI27UE
Langue d'enseignement
English
Matières
ACCOUNTING / AUDIT / CONTROL
Responsable(s)
J.IMONIANA
Intervenant(s)
Joshua IMONIANA
Niveau
Master
Année de formation
Période

Présentation

Prérequis
***Prerequisite: AUDIT TECHNIQUES

*Students should have little above basic knowledge of IT/IS, the structure of accounting information systems, auditing and a good general business culture. Overall, students are required to be able to demonstrate good analytical skills when confronted with various types of information systems auditing tasks.
Objectifs
At the end of the course, the student should be able to:

- Go beyond the idea of auditing around the computer but place more emphasis on auditing through and with the computer based on the ISAs. - Understand the mechanism by which the auditor seeks assurance of the internal control processes by mitigating the apparent risk exposures with a level of IT auditing activities. - Draw out an IT auditing plan, implement a level of test of general controls and also exercise application tests to assist the substantive procedures in the era of data analytics. - Perform a documentation of electronic work-papers to meet up with standards and also learn why certain Big Auditing firms and the 2nd-tier firms are reluctant to implement it. - Prepare reports based on the job done to serve various users.
Présentation
Topic 1: Concepts of IS Auditing, Tasks and Knowledge Statements. IS Auditing Standards and Guidelines- What does auditing around, with and through the computer entail and which are the standards?

Topic 2: Auditing IT/IS and Engagement Planning - Which are the mechanisms and how does the auditor seek assurance of the internal control processes by mitigating the apparent risk exposures with a level of IT auditing activities?

Topic 3: IT auditing working papers procedures - How does the traditional procedure differ from the electronic and how does the mechanism look like?

Topic 4: Auditing Softwares, Tools & Techniques - Which to use?

Topic 5: Systems Development, Infrastructure/Acquisition Practices . Analysis of General Controls in place to address information systems threats, vulnerability and risks (Organizational Controls; Acquisition Development, Maintenance & Documentation Controls; Hardware & Operation Controls; Access and Technical Support Controls); what is the impact in the assurance services or financial statement auditing as a matter of scope?

Topic 6: Business Application Systems. Analysis of Application System Controls (Vulnerability, Confidentiality, Accountability, Auditability & Classification of risks) - Can one also adopt other criteria by analysing the rate at which businesses are prone to: Erroneous record keeping, Unacceptable accounting, Business interruptions, Erroneous management decisions, Fraud and Embezzlement, Statutory sanctions, Excessive costs, Loss or destruction of assets, Competitive disadvantage?

Topic 7: Performing CAAT - Computer Assisted Audit Techniques to support the substantive tests - How could you build one? IS Audit Reporting – What does IS audit reporting entail?

Topic 8: IT Governance - What does the IT Governance involve and what are the auditors’ responsibilities?

Topic 9: Cybersecurity – What is the organisation up to in terms of restriction of access from outsiders through the internet transactions and connectivity.

Topic 10: Disaster Recovery Planning / Business Continuity Planning – What is the preparedness of the organisation in terms of restarting in case of any contingency.

Topic 11: Compliance of ITGC, ISO 27001, PCI-SS - To What extent is the compliance programme avoiding undue penalties from non-complaint?

Topic 12: Contemporary Issue in IS Auditing – Artificial intelligence, Robotics Process Automation in Auditing - What does RPA entail and what is its effect on IS Auditing process?

Modalités

Organisation
Type Amount of time Comment
Présentiel
Cours interactif 18,00
Autoformation
Recherche 9,00
Travail personnel
Charge de travail personnel indicative 9,00
Overall student workload 36,00
Évaluation
The assessment criteria used here is meant to test the deliverables in the way they were presented and the take-aways in the way it represents to the students behaviors and conceptions on the subject.
Control type Duration Amount Weighting
Contrôle continu
Présentation orale 1,00 1 30,00
Exercices 0,50 4 20,00
Examen (final)
Examen écrit 2,00 1 50,00
TOTAL 100,00

Ressources

Bibliographie
Piattini, Mario (2000) Auditing Information Systems. Hershey: Idea Group. -
Imoniana, Joshua O. (2016) Auditoria de Sistemas de Informação. 3rd. Ed. São Paulo: Atlas. -
Namuduri, K. (2013). Information systems auditing – going beyond compliance. Int J. of Auditing Technology, 1(1): 45-51 -
Seeburn, K. (2013). The IS auditor: what are the key knowledge requirements. Intl J. of Auditing Technology, 1(1):34-44 -
Vasarhelyi, M.A.; Alles, M.; Kogan, A. (2004). Principles of analytic monitoring for continuous assurance. Journal of Emerging Technologies in Accounting, 1(1):.1-21 -