Professional Documents
Culture Documents
Solution Manual For Core Concepts of Information Technology Auditing Hunton Bryant Bagranoff
Solution Manual For Core Concepts of Information Technology Auditing Hunton Bryant Bagranoff
Solution Manual For Core Concepts of Information Technology Auditing Hunton Bryant Bagranoff
IT AUDIT
SOLUTIONS MANUAL
Chapter 8
Discussion Questions
8-1 The disadvantages of using electronic working papers (which include electronic audit
programs and questionnaires) deal primarily with over-reliance and failure to fully
understand the underlying mechanics of the process. Inexperienced auditors may simply
enter information without understanding the full implications of the information. There
is also the danger of entering information in the wrong place, which can lead to incorrect
audit conclusions. Finally, the omission of information in the working papers can also
8-2 Audit expert systems are especially good for structured, routine tasks for which expertise
can be adequately captured and represented in the knowledge base of the system. Some
decisions, and going concern decisions. The expert system must be able to render a
decision such as bankrupt or not, going concern or not, rely on internal controls or not.
Thus, this kind of structured decision is a good candidate for an expert system.
8-3 The liability of an auditor relying on an expert system is an issue in its infancy with
respect to the law. There have been a few cases but the issue is still open. You may wish
to have students read: “An Analysis of Potential Legal Liability Incurred through Audit
the least expensive media, but direct OBDC connection is the most efficient, since the
8-5 In using test desks, the auditor’s biggest concern is that (s)he must try to cover all
possible exceptions and deviations from the normal output. If a possible deviation is
omitted from testing, this may be the very thing that is in fact problematic. In an
integrated test facility, the auditor must be careful to reverse any test transactions that
have been introduced in the client’s live system. Failure to do so will corrupt the client’s
8-6 An input file definition in ACL is the structure that ACL attaches to a file being imported
into ACL. Client data that is imported into ACL must have an input file definition (IFD)
so that ACL can properly identify the data and data types within each field. For example,
is a field numeric or alphanumeric? Is it a data field? The IFD identifies the character of
data in each field being imported into ACL. Once the data are imported into ACL, the
data can be manipulated in many different ways. One can look at various columns and
rows, filtering the data for various criteria of particular interest to the auditor. Each of
these filtered files is called a “view” in ACL. An auditor can establish as many “views”
as (s)he wants. Views are temporary but can be saved if the auditor wishes. A view does
not change the underlying data in the imported file or the IFD.
8-7 The Statistics command can analyze data or numeric data elements within a file. For
example, this command will give you the maximum and minimum values for a selected
field, the number of records with a value of 0 in that field, the number of negative
records, and the average for the field. The Statistics command cannot be run on a
8-8 Digital analysis is a technique for detecting anomalies in a dataset. The technique helps
to identify any fields where the first digit of the data in that field is outside the expected
frequency of occurrence that that particular first digit should appear. For example, in a
large data file of invoice numbers, the number one should appear as a first digit
approximately 30% of the time, while the number nine should appear approximately
4.6% of the time (see Figure 8-17, p. 198). If, for a sufficiently large sample of invoices,
the 15% of them started with the number nine, this would indicate possible fraud within
that file. The auditor would then investigate the reason for the deviation from the
expected frequency for that digit. Digital analysis is based on Benford’s Law, which says
that the first digits of a set of naturally occurring numbers will follow an exponential
distribution. Numbers that occur in a set pattern or sequence will not follow Benford’s
Law. For example, telephone numbers, zip codes, and social security numbers follow a
8-9 A data query model is using an entire set of facts or circumstances to determine if fraud is
present. For example, in examining travel vouchers submitted for payment, one might
examine the entire circumstances of the trip. When did the trip occur? Does the data of
business coincide with the dates submitted for reimbursement. It means looking at more
than just the travel voucher, but going further to see if all of the facts fit to establish the
8-10 An embedded audit module is a batch routine inserted into the audit client’s information
waiting until the annual audit is conducted. The auditor embeds the audit module, with
Exercises
8-11
8-11.3 190 of 772 met the test: amount>1000. The total of Amount is: $318,379.09.
8-11.4 The average of total accounts receivable is $607.36 (Analyze, Statistics, Statistics On
Amount). Note that the average of the 609 positive accounts receivable records is
$865.81, while the average of the 161 negative accounts receivable is -$362.71.
8-11.5
The two strata in the middle have the highest amount of receivables.
larger than one. In the accounts receivable file, there are several first digits that appear
suspect. In particular, the receivables that begin with 2, 5, and 6 bear some further
investigations. The auditor may also look at receivables that begin with 8 or 9 also. An
8-11.9 There are 37 vendors represented in the Ap_trans file. (Highlight the Vendor number
column and select Analyze, Classify. This will show the number of records associated
with each vendor.) Note that there are 50 vendors in the Vendor file; however, the
question asks how many vendors are represented in the Ap_trans file.
8-11.10 Yes. There are 101 gaps in invoice numbers. (Highlight the invoice number column,
then select Analyze, Gaps) The auditor would examine this further to determine if this
8-11.11 There are no duplicate invoice numbers (Highlight the invoice number column, then
8-11.12 3 vendors sell inventory items that cost more than $100 (Set filter to Unit_Cost>100.)
8-11.13 The log of the aged A/P file looks like this:
0 -> 29 4 3.92%
30 -> 59 22 21.57%
60 -> 89 19 18.63%
90 -> 119 20 19.61%
120 -> 10,000 37 36.27%
102 100.00%
of the accounts payable are 90 days or older. The auditor would be very concerned as to
why this company is apparently not paying its bills on time and would investigate
accordingly.
8-11.14 You must open the “Vendor” file to obtain the street addresses of the company’s vendors.
No vendors have P.O. Boxes for addresses. This is important because a P. O. Box is
sometimes (but of course not always) indicative of a suspect address. You can visually
scan the address file, or in a bigger file, you would use the “Sounds Like” expression to
8-11.15 Highlight the Invoice Amount column and choose Analyze, Benford. The command log
1 29 31 0.260
2 18 18 0.010
3 9 13 0.971
4 12 10 0.541
5 12 8 1.255
6 6 7 0.130
7 8 6 0.671
8 4 5 0.322
9 4 5 0.079
The digit “5” is the only one that appears to be slightly above normal in terms of how many times
you would expect it to appear as the first digit. The auditor may do some investigation here, but
would likely not be overly concerned with this results, as they appear fairly in line with
expectation.
8-12.1 152 inventory items are maintained by this company. (Analyze, Count)
8-12.2 There are 37 inventory items sold at Location 3. There are two ways to determine this.
One way is to select Analyze, Count and under “If” type: Location=’03’
A second (similar) way is to set the filter to: Location=’03’ and then select Analyze,
8-12.3 Highlight the Unit Cost column, then select Analyze, Statistics. The average cost of an
inventory item is $17.73. The most expensive and least expensive inventory items are
381.20 and –6.87 (which, of course, bears looking into). The command log looks like
this:
@ STATISTICS ON UnCst TO SCREEN NUMBER 5
Field : UnCst
Number Total Average
Positive : 149 2,642.35 17.73
Zeros : 0
Negative : 3 -16.88 -5.63
Totals : 152 2,625.47 17.27
Abs Value: 2,659.23
Range : 388.07
Highest : 381.20 173.80 155.80 137.80 87.40
Lowest : -6.87 -6.80 -3.21 0.01 0.03
8-12.4 The profit on item #034255003 is $6.58. Set the filter to:
ProdNo='034255003'
Use the expression builder to calculate the profit (SalePr-UnCst). If you wanted, you could create
a new column for the profit by right clicking and choosing “add column,” enter the expression for
8-12.5 There are 4 inventory items that have a product status of “U.” (Set filter to U:
ProdStat='U')
8-12.6 Yes, there are 3 items for which the sales prices are less than the unit cost. (Set filter to:
SalePr-UnCst<0) As an auditor, I would investigate why there are three items for which
8-12.7 Yes, there are 6 items for which we should have an order placed but we won’t. (Set filter
to: QtyOH<MinQty AND QtyOO=0). This might indicate a problem in our ordering
system if the system is automated, and even if the system is a manual reordering system.
Obviously these items should be on order. The auditor would investigate why they are
not on order.
8-12.8 The total market value of the inventory is $ 1,029,061.61. (Highlight the Market Value
8-13 Open the Empmast file. (Click the default view for this file.)
8-13.2 There are 23 male employees (Analyze, Count, If Sex=’M’) and 19 female employees
(Analyze, Count, If Sex=’F’). Note that the characters within the single quotes are case
8-13.3 Thirty employees have college degrees (Set filter to: EdLevel>=16).
8-13.4 The average salary is $27,441 (Highlight the Salary column and then select Analyze,
Statistics); the max salary is $52,750; the min salary is $15,340. The command log looks
like this:
8-13.5 There don’t appear to be any employees who are “grossly” over- or underpaid, though
this is a matter of judgment. Highlighting the Salary field and selecting Analyze,
From an analysis of this data, six people make in the lowest strata (between 15,340.00 ->
19,080.99), while one individual earns in the top strata (49,009.00 -> 52,750.00). If the auditor
wishes, (s)he can verify the salary of this individual by checking with the paymaster
8-13.6 Bonuses are between $300 and $1000 (Analyze, Statistics). Stratifying the bonus column
there were, the auditor would investigate these are possible nepotism.
8-13.8 There don’t appear to be any related employees. This was partly tested by the previous
question and the duplicate address test. You can further test this by testing for duplicates
on last name, which will show no employees with the last name.
8-14.1 There are no duplicate check numbers. (Highlight “Cheque Number” field, Analyze,
Duplicates)
8-14.2 There is one gap. (Highlight “Cheque Number” field, Analyze, Gaps) The command log
Presorting data
8-14.3 Yes, gross pay less taxes equals net pay in all cases. You can verify this by calculating
and inserting a new field, Calculated_tax, which will be equal to Gross_Pay - Net_Pay. (Right
Solution manual for Core Concepts of Information Technology Auditing Hunton Bryant Bagranoff
click where you want the new column to appear, add new column, then use the expression builder
to create the expression.). Then, in the filter box, enter “Gross_Pay - Net_Pay<>Tax_amount.”
This expression will yield no matching records, which means that the two fields are equal.