EFGH Flashcards
Internal control system definition
Key process concerned with risk management and achievement of objectives
management control system objective
manage risk identified within an organisation
turnbull report 1999
this report provides a summary of the purposes of an internal audit
SPAMSOAP types of controls
separation of duties, people, arithmetical checks, management information, supervision, observation, authorisation, phsyical
categories of controls
financial, operational, compliance (legal)
cybernetic control systems
automated control systems
5 elements of an internal control system
-
limitations of internal control
skips segregation of duties
management can over ride controls
cost outweighs benefits
control focuses on routine transactions only
function of an internal audit
to review internal control systems and examine operations
importance of an internal audit
can be outsourced or internal. External audit may rely on internal audit
need for internal audit report
so that the board remains informed
stages of internal audit
-
internal audit
-
external audit
statutory audit required by law to ensure compliance with regulations
discuss an external report on internal controls
-
internal audit report
summarise processes used to review the effectiveness of internal controls, confirm actions been taken to remedy any weaknesses, disclose process used to deal with problems
Cloud technology
uses internet to share, access and store physical or virtual resources
SAAS software as a service
provides access to a service for a subscription fee
strategic opportunities from cloud technology
cost leadership through reduced costs (no need for location)
differentiation through new mobile services (tracking)
helping businesses move into new locations
Cloud technology benefits
sharing tech, easier set up, flexibility
cloud technology risks
reliance on service providers, system outages, data security
generic vs bespoke software
generic = SAGE bespoke = individualised for company
8 techniques to gather info
interviews, written Qs, Questionaire, observation, workshop, doc analysis, protocal analysis, prototype
advantages of generic software
cheaper, quicker, new updates, regular system updates