MSL Moore Stephens Lovelace - Laserfiche WebLink

Home Browse Search

MSLMOORE STEPHENS LOVELACE cws & ADVISORS Information Systems Audit Procedures As part of our audit, we routinely perform an assessment of our clients' computer-based financial management systems. To accomplish this, we incorporate a unique two-professional system. A seasoned auditor and an Information Technology Specialist perform this analysis together. We believe this approach is unique because the use of two professionals enables us to assess not just how your IT system functions, but also how those functions directly affect your accounting and reporting systems. Our goal is to ensure that both are functioning properly. Examples of computer controls that will be reviewed include the following: Information Security The information security function is responsible for the administration and maintenance of a client's information security program, including both physical and logical security. The primary goal of such a program is to ensure that access to programs, data, online transactions, and other computing resources is restricted to authorized users. Our review of general computer controls in the information security area will include an appropriate consideration of the level of security that is adequate for a particular processing environment and the availability of access control mechanisms in that environment. Systems Acquisition, Development, and Maintenance Systems development personnel are responsible for the selection and/or design, programming, and maintenance of the application systems to meet the needs of the various users. Our audit procedures are designed to ensure that application programs are designed, implemented, and maintained according to management's intentions and in accordance with industry-accepted practices. Computer Operations The computer operations department is responsible for the day-to-day processing activities of the systems, ensuring that jobs are scheduled and processed in accordance with established routines. It is also responsible for the physical control of data stored on portable media and timely, accurate distribution of reports to users. Our review will be to test that these control procedures were effective throughout the year. Proposed Segmentation of the Engagement The following section gives an overview of the major audit segments (Planning, Substantive Testing and Wrap Up), as well as procedures we anticipate will be implemented in these areas. The section is not 1 intended to provide you with all of the details of our audit steps. It indicates our understanding of the City, its environment, and the internal controls in place. The overall objective of our audit segmentation and related procedures is to ensure that our audit opinions are supported by the procedures performed. Procedures are evaluated throughout the audit process based upon the City's environment, internal controls, and economic condition. In addition, our audit plan is evaluated throughout the audit and procedures are performed to address any significant issues identified during the audit process. I ci: : - ' 241