SU5 - IT General and Application Controls Part 3
SU5 - IT General and Application Controls Part 3
Classification of
computer controls:
❑ Accounting system: manual and computerised
❑ Risks in the IT environment
❑ Management’s response to risks
❑ Two broad categories in IT environment:
▪ General Controls
▪ Application controls
Application Controls
❑ Application = program performs task
❑ Manual and computerised controls
❑ Within a particular application (e.g., sales, debtors)
❑ Initiated, recorded, processing and output
❑ Provide reasonable assurance that recorded transactions are:
❑ Valid
❑ Accurate
❑ Complete
English Only | Copyright © 2023 Edition | North-
West University, Raymond Cramer
3
Auditing Fundamentals, page 169
Application Controls
❑ Primary objective:
❑Toprevent, or detect and correct misstatements
arising when a transaction is:
❑ Input
❑ Processed
❑ Output generated
Application Controls
❑ Key components of applicationcontrols:
❑Input: Capturing, recording, initiation of information
❑Processingof data with computer
❑Distribution of outputs
Masterfile
❑Changes to Masterfile data. changes
Manual vs computer
controls
❑ Manual and computerised application controls:
❑ Independent manual controls
❑Example
❑ IT-dependent manual controls
❑Example
❑ Programmed (automated) controls
❑Example
❑ Table 5.2 in Auditing Fundamentals: Comparison between
control activities in manual and computerised environment
English Only | Copyright © 2023 Edition | North-
West University, Raymond Cramer
6
Auditing Fundamentals, page 171
Input controls
Masterfile amendments
English Only | Copyright © 2023 Edition | North-
West University, Raymond Cramer
7
Auditing Fundamentals, page 173
Input controls:
Input controls:
Standard
and user
friendly
11
Data echo test / closed-loopverification
Standard and
user friendly
12
CompulsoryFields
Screen
dialogue
13
Input controls: Auditing Fundamentals, page 174