Auditor’s Guide to Information Systems Auditing

Chapter 1. Technology and Audit

This chapter covers the basics of technology and audit. The chapter is intended to provide an understanding of the technology currently in use in business as well as knowledge of the jargon and its meaning. It also covers the components of control within an IT environment and explains who the main players are and what their roles are within this environment.

After reading this chapter you should be able to:

• Understand the technology currently in use in business

• Understand the jargon and its meaning

• Define the components of control in an IT environment

• Briefly explain who the players are and what their roles are

• Define the fundamental differences between batch and on-line systems

• Explain the principal business risks within each processing type

• Describe the components that make up the on-line system and the effect these have on control objectives

• Explain the controls within each type of computer system

• Contrast the basics of batch and on-line security

• Demonstrate an ability to:

  • Identify the differing types of database structures

  • Identify the principal components of each type of Database Management System (DBMS)

  • Identify the primary threats to each of these components

  • Relate DBMS components to the operating system environment in which they operate

  • Identify potential control opportunities and select among control alternatives

  • Identify the principal DBMS products in market

  • Recognize vulnerabilities in multiple DBMS environments and make appropriate recommendations

Technology ...