EFGH Flashcards
Internal control system definition
Key process concerned with risk management and achievement of objectives
management control system objective
manage risk identified within an organisation
turnbull report 1999
this report provides a summary of the purposes of an internal audit
SPAMSOAP types of controls
separation of duties, people, arithmetical checks, management information, supervision, observation, authorisation, phsyical
categories of controls
financial, operational, compliance (legal)
cybernetic control systems
automated control systems
5 elements of an internal control system
-
limitations of internal control
skips segregation of duties
management can over ride controls
cost outweighs benefits
control focuses on routine transactions only
function of an internal audit
to review internal control systems and examine operations
importance of an internal audit
can be outsourced or internal. External audit may rely on internal audit
need for internal audit report
so that the board remains informed
stages of internal audit
-
internal audit
-
external audit
statutory audit required by law to ensure compliance with regulations
discuss an external report on internal controls
-
internal audit report
summarise processes used to review the effectiveness of internal controls, confirm actions been taken to remedy any weaknesses, disclose process used to deal with problems
Cloud technology
uses internet to share, access and store physical or virtual resources
SAAS software as a service
provides access to a service for a subscription fee
strategic opportunities from cloud technology
cost leadership through reduced costs (no need for location)
differentiation through new mobile services (tracking)
helping businesses move into new locations
Cloud technology benefits
sharing tech, easier set up, flexibility
cloud technology risks
reliance on service providers, system outages, data security
generic vs bespoke software
generic = SAGE bespoke = individualised for company
8 techniques to gather info
interviews, written Qs, Questionaire, observation, workshop, doc analysis, protocal analysis, prototype
advantages of generic software
cheaper, quicker, new updates, regular system updates
disadvantages of generic software
may not fit the precise need, incompatible and uncertain (discontinuity)
4 stages to evaluate softwares
1) evaluate whether a COTS solution is appropriate
2) define requirements for new software
3) evaluate competing packages
4) implement selected package
big data
non transactional data which is collected from everywhere, e.g. facebook, twitter, forums
big data, main strategic uses
predictive modelling, cluster analytics, social analytics
big data EG
google flu trend
pricing strategies, using big data
customers (willingness to pay)
cost (exit costs, opportunity costs)
competition (differentiation)
E business
key business processes occurring through the use of internet technologies
E commerce
subset of ebusiness, trading, buying and selling online
main changes brought about by ebusiness are
disintermediation: removal of direct selling
reintermediation: price comparison websites
countermediation: setting up by an established company e.g. tesco direct
E business benefits
opportunity to access new markets, target markets more effectively and increase sales
E business barriers
Security concerns, set up costs and running costs
Cyber security threats
theft of valuable date, assets and disruption
cyber security controls
firewalls, flows, data encryption and virus protection
software controls
prevents usage of unauthorised or illegal softwares