Kuliah ke-5(1)

Embed Size (px)

Citation preview

  • 8/18/2019 Kuliah ke-5(1)

    1/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan

    Farida Hermana

    Audit Data

    Teknik Audit IT

  • 8/18/2019 Kuliah ke-5(1)

    2/55

  • 8/18/2019 Kuliah ke-5(1)

    3/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan

    Farida Hermana

    Audit Data3

    The Audit Process co#ponents

    • S1 Audit Charter 4 engage#ent etter6 1 January 2005• S5 Panning 1 January 2005• S$ Perfor#ance of Audit %ork 1 January 2005• S& 'eporting 1 January 2005• S( )oo*+,p Acti-ities 1 January 2005

    Supporting standards

    • S2 Independence 1 January 2005• S3 Professiona !thics and Standards 1 January 2005• S" Co#petence 1 January 2005• S. Irreguarities and Iega Acts 1 Septe#/er 2005• S10 IT o-ernance 1 Septe#/er 2005• S11 ,se of 'isk Assess#ent in Audit Panning 1 o-e#/er 2005• S12 Audit ateriaity 1 Juy 200$• S13 ,sing the %ork of ther !xperts 1 Juy 200$• S1" Audit !-idence 1 Juy 200$• S15 IT Contros 1)e/ruary 200(

  • 8/18/2019 Kuliah ke-5(1)

    4/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan

    Farida Hermana

    Audit Data

    Audit Techni7ues 4genera6• 'e-ie* of the syste# of

    interna contro

    •Anaytica 'e-ie*

    • 'econciiations

    • !xterna docu#ents andrecords

    •  or#s8 standards and industry

    statistics• !xistence -erification

    • Infor#ation of audittee

    • ther  – Attestae de -ita

     – egati-e -erification ofo/igations

     – State#ents9opinions of other4audit6 professionas

     – Third party Judge#ent

  • 8/18/2019 Kuliah ke-5(1)

    5/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan

    Farida Hermana

    Audit Data

    IT Audit techni7uesAudit techniques• Co#puter Assisted Audit Techni7ues 4CAATs6• Audit Sa#ping• !ffect of Per-asi-e IS Contros• ,se of 'isk Assess#ent in Audit Panning• Co#puter )orensics

    IT Management and Governance• IT o-ernance Syste# :e-eop#ent ;ife Cyce

    4S:;C6 'e-ie*• utsourcing of IS Acti-ities• Post+i#pe#entation 'e-ie*

    IT Infrastructure related•

    4ICT6 irtua Pri-ate et*orks

  • 8/18/2019 Kuliah ke-5(1)

    6/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan

    Farida Hermana

    Audit Data

    ISACA IS Auditing uideines 416• 01 ,sing the %ork of ther !xperts 4P:)8 50?6 ar 200(• 02 Audit !-idence 'e7uire#ent 4P:)8 50?6 ar 200(• 03 ,se of Co#puter+Assisted Audit Techni7ues 4P:)8 5.?6

    ar 200(• 0" utsourcing of IS Acti-ities to ther rganisations 4P:)8

    5"?6 ar 200(• 05 Audit Charter 4P:)8 "&?6 )e/ 200(• 0$ ateriaity Concepts for Auditing Infor#ation Syste#s

    4P:)8 55?6 ar 200(

    • 0& :ue Professiona Care 4P:)8 "5?6 ar 200(• 0( Audit :ocu#entation 4P:)8 "&?6 ar 200(• 0. Audit Considerations for Irreguarities 4P:)8 &3?6 Aug 200(• 10 Audit Sa#ping 4P:)8 55?6 o- 1...

  • 8/18/2019 Kuliah ke-5(1)

    7/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan

    Farida Hermana

    Audit Data

    ISACA IS Auditing uideines 426• 11 !ffect of Per-asi-e IS Contros 4P:)8 13"?6 o- 1...

    • 12 rganisationa 'eationship and Independence 4P:)8 ".?6ay 2000

    •  13 ,se of 'isk Assess#ent in Audit Panning 4P:)8 5$?6 ay 2000

    • 1" Appication Syste#s 'e-ie* 4P:)8 3"?6 Ju 2001

    • 15 Panning 4P:)8 35?6 o- 2001

    • 1$ !ffect of Third Parties on an rganisation@s IT Contros 4P:)81""?6 o- 2001

    • 1& !ffect of onaudit 'oe on the IS Auditor@s Independence 4P:)81"0?6 Apr 2002

    • 1( IT o-ernance 4P:)8 1"5?6 Apr 2002

    • 20 'eporting 4P:)8 133?6 ct 2002

  • 8/18/2019 Kuliah ke-5(1)

    8/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan

    Farida Hermana

    Audit Data

    ISACA IS Auditing uideines 436• 21 !nterprise 'esource Panning 4!'P6 Syste#s 'e-ie* 4P:)8

    11"?6 Aug 2003• 22

  • 8/18/2019 Kuliah ke-5(1)

    9/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan

    Farida Hermana

    Audit Data

    ISACA IS Auditing uideines 4"6• 30 Co#petence 4P:)8 1"5?6 )e/ 2005

    • 31 Pri-acy 4P:)8 1.2?6 Jun 2005

    • 32

  • 8/18/2019 Kuliah ke-5(1)

    10/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan

    Farida Hermana

    Audit Data

    ISACA IS Auditing Procedures• P01 IS 'isk Assess#ent easure#ent 4P:)8 23&?6 Apr 2002

    • P02 :igita Signatures 4P:)8 1&$?6 ay 2002

    • P03 Intrusion :etection 4P:)8 1$(?6 ay 2003

    • P0" >iruses and ther aicious ;ogic 4P:)8 22&?6 ay 2003

    • P05 Contro 'isk Sef+assess#ent 4P:)8 1$$?6 ay 2003

    • P0$ )ire*as 4P:)8 2"(?6 ay 2003

    • P0& Irreguarities and Iega Acts 4P:)8 201?6 ct 2003

    P0( Security Assess#ent + Penetration Testing and >unera/iityAnaysis 4P:)8 221?6 )e/ 200"

    • P0. !-auation of anage#ent Contros -er !ncryptionethodoogies 4P:)8 1&0?6 Apr 200"

    • P10

  • 8/18/2019 Kuliah ke-5(1)

    11/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan

    Farida Hermana

    Audit Data

    ISACA Audit progra#s 416•

  • 8/18/2019 Kuliah ke-5(1)

    12/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan

    Farida Hermana

    Audit Data

    ISACA Audit progra#s 426• eCo##erce Security Seection B Identification of Trading Partners

    4:C8 2?6 ct 2000• eneric Appication 'e-ie* 4:C8 2?6 Sep 2001• Identity anage#ent 4:C8 2?6 )e/ 200"• Incident anding 4:C8 2?6 Ju 200"• ;inux Security8 Audit and Contro )eatures Sep 200$• race :ata/ase 4:C8 2?6 Aug 200"•

    race !+

  • 8/18/2019 Kuliah ke-5(1)

    13/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan

    Farida Hermana

    Audit Data

    ISACA Audit progra#s 436• SAP '+3 4:C8 2?6 )e/ 200$

    • Securing the et*ork Peri#eter 4:C8 2?6 ay 2003

    • Security Pro-isioning 4P:)8 &2?6 ay 2003• Softser-e Internet Ser-ices 4P:)8 225?6 :ec 200"

    • Soft*are ;icensing 4:C8 2?6 Sep 2001

    • Syste#s :e-eop#ent ;ife Cyce 4S:;C6 4:C8 2?6 Sep 2001

    Teephone anage#ent irtua Pri-ate et*orking 4:C8 2?6 Aug 200"

  • 8/18/2019 Kuliah ke-5(1)

    14/55

  • 8/18/2019 Kuliah ke-5(1)

    15/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan

    Farida Hermana

    Audit Data

    "#$%&' CAATs GThree t)!esG :ata testingG Syste#s testingG Infor#ation #odeing and anaysis securityH

    2ther considerations *hen to use addressing and reso-ing technica issues ensuring integrity of the CAAT process8 incuding security o-er the CAAT soft*are8 the fie of seected ite#s and the seection processH

    CAAT panning issues8 data retention8 data integrity and co#peteness8 pri-acy andconfidentiaity concerns8 the re#o-a of fies or seected records to the auditorFs co#puter and potentiay

    offsiteH use of CAATs in -arious en-iron#ents8 incuding continuous auditing&

  • 8/18/2019 Kuliah ke-5(1)

    16/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan

    Farida Hermana

    Audit Data

    Audit of Infor#ation Syste#s4Appication syste#sH 1"6

    • Panning

    •Perfor#ance of Audit %ork 

    • 'eporting

  • 8/18/2019 Kuliah ke-5(1)

    17/55

    F id H

  • 8/18/2019 Kuliah ke-5(1)

    18/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan

    Farida Hermana

    Audit Data

    Audit of Infor#ation Syste#s

    lanning considerations

    An integra part of panning is understanding the organisation3s informations)stem environment to a sufficient extent for the IS auditor to deter#ine

     –

    the siDe and co#pexity of the syste#s and  – the extent of the organisationFs dependence on infor#ation syste#sH The IS auditor shoud

    gain an understanding of the organisationFs #ission and /usiness o/=ecti-es8

     – the e-e and #anner in *hich infor#ation technoogy and infor#ation syste#s are used tosupport the organisation8 and

     – the risks and exposures associated *ith the organisationFs o/=ecti-es and its infor#ationsyste#sH

    Aso8 an understanding of the organisationa structure incuding roes andresponsi/iities of key IS staff and the /usiness process o*ner of the appicationsyste# shoud /e o/tainedH

    F id H

  • 8/18/2019 Kuliah ke-5(1)

    19/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan

    Farida Hermana

    Audit Data

    Audit of Infor#ation Syste#s

    lanning considerations a!!lication level ris4s

    Appication e-e risks at the syste# and data e-e incude such things as

     – Syste# availa-ilit) risks reating to the ack of syste# operationa capa/iity

     – Syste# securit) risks reating to unauthorised access to syste#s and9or data

     – Syste# integrit) risks reating to the inco#pete8 inaccurate8 unti#ey8 orunauthorised processing of data

     – Syste# maintaina-ilit) risks reating to the ina/iity to update the syste# *henre7uired in a #anner that continues to pro-ide for syste# a-aia/iity8 security8 andintegrity

     – Data risks reating to its co#peteness8 integrity8 confidentiaity8 pri-acy andaccuracy

    Farida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    20/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan

    Farida Hermana

    Audit Data

    Audit of Infor#ation Syste#s

    lanning considerations A!!lication controls 

    Appication contros to address the appication e-e risks #ay /e in

    the for# of

     – co#puterised contros /uit into the syste#8 – #anuay perfor#ed contros8

     – or a co#/ination of /othH

     

    !xa#pes incude – the co#puterised #atching of docu#ents 4purchase order8 in-oiceand goods recei-ed report68

     – the checking and signing of a co#puter generated che7ue and

     –  the re-ie* /y senior #anage#ent of exception reportsH

    A lik i K C A i d A di T h iFarida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    21/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan

    Farida Hermana

    Audit Data

    Audit of Infor#ation Syste#s

    lanning considerations General IT Controls%here the option to pace reiance on progra##ed contros is taken8ree-ant genera IT contros shoud /e considered8 as *e as controsspecificay ree-ant to the audit o/=ecti-eH

    enera IT contros coud /e the su/=ect of a separate re-ie*8 *hich*oud incude such things as

     –  physica contros8

     – syste# e-e security8 – net*ork #anage#ent8 – data /ackup – contingency panning

    A lik i K C A i d A di T h iFarida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    22/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan

    Farida Hermana

    Audit Data

    A lik i K C A i d A di T h iFarida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    23/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan

    Farida Hermana

    Audit Data

    Audit of Infor#ation Syste#s

    lanning considerations 5hen and 5hatAppication syste# re-ie*s can /e perfor#ed – *hen a package appication syste# is /eing e-auated for ac7uisition8 –  /efore the appication syste# goes into production 4pre+i#pe#entation6 – after the appication syste# has gone into production 4post+i#pe#entation6H

    re6im!lementation appication syste# review co-erage incudes – the architecture of appication e-e security8 –  pans for the i#pe#entation of security8 – the ade7uacy of syste# and user docu#entation –

     the ade7uacy of actua or panned user acceptance testingH

    ost6im!lementation review co-erage incudes – appication e-e security after i#pe#entation –  #ay co-er syste# con-ersion if there has /een a transfer of data and #asterfie

    infor#ation fro# the od to the ne* syste#

    A lik i K C A i d A di T h iFarida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    24/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan

    Farida Hermana

    Audit Data

    Audit of Infor#ation Syste#s

    3H P!')'AC! ) A,:IT %'? 

    •3H1 :ocu#enting the )o* of Transactions

    • 3H2 Identifying and Testing the Appication

    Syste# Contros

    "H '!P'TI

    • "H1 %eaknesses

    A lik i K t C t A i t d A dit T h iFarida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    25/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan

    Farida Hermana

    Audit Data

    A lik i K t C t A i t d A dit T h iFarida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    26/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

    Configuration Management Data Base

    A lik i K t C t A i t d A dit T h iFarida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    27/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

    Audit of Infor#ation Syste#s

    Infor#ation Criteria

     – !ffecti-eness

     – !fficiency

     – Confidentiaity

     – Integrity 4 co#petenesscorrectness ti#einess authoriDation6

     – A-aia/iity

     – Co#piance

     – 'eia/iity of Infor#ation

    • /=ecti-es shoud /e de-eoped to address the & C

  • 8/18/2019 Kuliah ke-5(1)

    28/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

    Audit of the :ata Center 9 ICT infrastructure

    • ;ogica access contro

    • Soft*are change #anage#ent

  • 8/18/2019 Kuliah ke-5(1)

    29/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

    Audit of ogica access controenera Access Path Three parts

    - Identification

    - Authentication

    - Autorisation

    User 

     Data communication software

    Transaction software

     Application software

     Data access methods

     Data

    Aplikasi Komputer : Computer Assisted Audit TechniquesFarida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    30/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

    Aplikasi Komputer : Computer Assisted Audit TechniquesFarida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    31/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

    Four commonl) used sam!ling methods&

    Statistical sam!ling methods

    7andom sam!ling K!nsures that a co#/inations of sa#ping units in the popuation ha-eane7ua chance of seection

    S)stematic sam!ling KIn-o-es seecting sa#ping units using a fixed inter-a /et*een

    seections8 the first inter-a ha-ing a rando# startH!xa#pes incude

    6Monetar) 1nit Sam!ling 

    68alue 5eighted selection *here each indi-idua #onetary -aue4eHgH8 L16 in the popuation is gi-en an e7ua chance of seectionH As theindi-idua #onetary unit cannot ordinariy /e exa#ined separatey8 theite# *hich incudes that #onetary unit is seected for exa#inationHThis #ethod syste#aticay *eights the seection in fa-our of the argera#ounts /ut sti gi-es e-ery #onetary -aue an e7ua opportunity forseectionH

    Another exa#pe incudes seectingever) 9nth sam!ling unit

    :onstatistical sam!ling methods

    Ha!ha;ard sam!ling KThe IS auditor seects the sa#pe *ithout foo*ing a structuredtechni7ue8 *hie a-oiding any conscious /ias or predicta/iityH o*e-er8anaysis of a haphaDard sa#pe shoud not /e reied upon to for# aconcusion on the popuation

  • 8/18/2019 Kuliah ke-5(1)

    32/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

    Standard S'+ on IT C2:T72LS 

    %" The IS auditor should evaluate and monitor IT controls that are an integral

    !art of the internal control environment of the organisation&

    %* The IS auditor should assist management -) !roviding advice regarding the

    design= im!lementation= o!eration and im!rovement of IT controls&

    Commentar)

    • anage#ent is accounta/e for the interna contro en-iron#ent of anorganisation incuding IT controsH

    • IT contros are co#prised of genera IT contros8 *hich incude –  per-asi-e IT contros8

     – detaied IT contros and – appication contros8

    • and refer to contros o-er the ac7uisition8 i#pe#entation8 dei-ery andsupport of IT syste#s and ser-icesH

    Aplikasi Komputer : Computer Assisted Audit TechniquesFarida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    33/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

    IT Contros• General IT controls 

     – are contros that #ini#ise risk to the o-era functioning of the

    organisationFs IT syste#s and infrastructure and to a /road set of

    auto#ated soutions 4appications6H• A!!lication controls 

     – are a set of contros e#/edded *ithin appicationsH

    • ervasive IT controls 

     – are genera IT contros that are designed to #anage and #onitor the ITen-iron#ent and8 therefore8 affect a IT+reated acti-itiesH

    • Detailed IT controls 

     – are #ade up of appication contros pus those genera IT contros not

    incuded in per-asi-e IT controsH

    Aplikasi Komputer : Computer Assisted Audit TechniquesFarida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    34/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

    Contro processes• are the poicies8 procedures and acti-ities

    • that are part of a contro en-iron#ent8

    • designed to ensure that risks are contained *ithin the risktoerances esta/ished /y the risk #anage#ent processH

    C

  • 8/18/2019 Kuliah ke-5(1)

    35/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

    :AT :ata Anaysis Techni7ues8Continous Auditing8 n ine Auditing

    •The IS auditor shoud consider the use of dataanaysis techni7ues – incuding the use of continuous assurance8

    • *hich ao*s IS auditors to #onitor syste# reia/iity on a

    continuous /asis and• to gather seecti-e audit e-idence through the co#puter

    *hen re-ie*ing IT contros

    Aplikasi Komputer : Computer Assisted Audit TechniquesFarida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    36/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

    A!!ro!riate ,vidence

    G Incudes the procedures as perfor#ed /y the auditor• Incudes the resuts of procedures perfor#ed /y the IS

    auditor• Incudes source docu#ents 4in either eectronic or paper

    for#at68 records and corro/orating infor#ation used tosupport the audit

    • Incudes findings and resuts of the audit *ork• :e#onstrates that the *ork *as perfor#ed and co#pies

    *ith appica/e a*s8 reguations and poicies

    7elia-le ,vidence

    In genera ter#s8 audit e-idence reia/iity is greater *hen it is• In *ritten for#8 rather than ora expressions

    • /tained fro# independent sources• /tained /y the IS auditor rather than fro# the entity

     /eing audited• Certified /y an independent party• ?ept /y an independent party

    Sufficient ,vidence

    • The e-idence can /e considered sufficient if itsupports a the #ateria 7uestions to the audito/=ecti-e and scopeH

    • Audit e-idence shoud /e o/=ecti-e and sufficientto ena/e a 7uaified independent party toreperfor# the tests and o/tain the sa#e resutsHThe e-idence shoud /e co##ensurate *ith the#ateriaity of the ite# and the risks in-o-edH

    • Sufficiency is a #easure of the 7uantity of audite-idence8 *hie appropriateness is the #easure of

    the 7uaity of the audit e-idence8 and they areinterreatedH In this context8 *hen infor#ationo/tained fro# the organisation is used /y the IS

    •03 The IS auditor should obtain sufficient and appropriate audit eidence to dra! reasonableconclusions on !hich to base the audit results"

    • 0# The IS auditor should ealuate the sufficienc$ of audit eidence obtained durin% the audit"

    Audit ,vidence> A!!ro!riate= 7elia-le and Sufficient ?IS standard '*@

    Aplikasi Komputer : Computer Assisted Audit TechniquesFarida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    37/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

    /tain audit e-idenceThe IS auditor can o/tain the audit e-idence /y

    • Inspection

    • /ser-ation• In7uiry and confir#ation

    • 'eperfor#ance

    • 'ecacuation

    • Co#putation• Anaytica procedures

    • ther generay accepted #ethods

    Aplikasi Komputer : Computer Assisted Audit TechniquesFarida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    38/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

    Audit :ocu#entation Potentia ,sesPotentia uses of docu#entation incude8 /ut are not i#ited to

    • :e#onstration of the extent to *hich the IS auditor has co#pied *ith the IS AuditingStandards

    •:e#onstration of audit perfor#ance to #eet re7uire#ents as per the audit charter 

    • Assistance *ith panning8 perfor#ance and re-ie* of audits

    • )aciitation of third+party re-ie*s

    • !-auation of the IS auditing functionFs NA progra##e

    • Support in circu#stances such as insurance cai#s8 fraud cases8 disputes and a*suits

    • Assistance *ith professiona de-eop#ent of staff 

    Aplikasi Komputer : Computer Assisted Audit TechniquesFarida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    39/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

    Audit docu#entation Ta/e of Contents:ocu#entation shoud incude8 at a #ini#u#8 a record of

    • 'e-ie* of pre-ious audit docu#entation

    • The panning and preparation of the audit scope and o/=ecti-esH IS auditors #ust ha-e anunderstanding of the industry8 /usiness do#ain8 /usiness process8 product8 -endor supportand o-era en-iron#ent under re-ie*H

    • inutes of #anage#ent re-ie* #eetings8 audit co##ittee #eetings and other audit+reated#eetings

    • The audit progra##e and audit procedures that *i satisfy the audit o/=ecti-es

    • The audit steps perfor#ed and audit e-idence gathered to e-auate the strengths and*eakness of contros

    • The audit findings8 concusions and reco##endations

    • Any report issued as a resut of the audit *ork • Super-isory re-ie*

    Aplikasi Komputer : Computer Assisted Audit TechniquesFarida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    40/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

    The extent of the IS auditorFs docu#entation depends on the

    needs for a particuar audit and shoud incude such things as• SC2,> The IS auditor3s understanding of the areas to -e audited and its

    environmentH

    • The IS auditor3s understanding of the information !rocessing s)stems and theinternal control environment incuding the – Contro en-iron#ent

     – Contro procedures – :etection risk assess#ent – Contro risk assess#ent – !7uate tota risk 

    • The author and source of the audit documentation and the date of its co#petion

    • Methods used to assess ade7uacy of contro8 existence of contro *eakness or ack of contros8and identifyco#pensating contros

    • Audit evidence8 the source of the audit docu#entation and the date of co#petion8 incuding – Com!liance tests8 *hich are /ased on test poicies8 procedures and segregation duties – Su-stantive tests8 *hich are /ased on anaytic procedures8 detaied test accounts /aances and other su/stanti-e

    audit procedures

    • Ac4nowledgement fro# appropriate person of recei!t of audit report and findings

    • Auditee3s res!onse to recommendations

    • 8ersion control8 especiay *here docu#entation is in eectronic #edia

    Aplikasi Komputer : Computer Assisted Audit TechniquesFarida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    41/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

     IT Audit :

    &" Arround The Computer '" Throu%h The Computer 

    3" (ith The Computer 

    ))""s Audit Conentional *

    &" +e,ak Audit  

    '" Kesera%aman Transaksi 

    3" Pemisahan tu%as

    #" -esiko

    ." Manfaat  

    er-edaan>

    ersamaan>&" /efinisi Auditin% 

    '" Auditor  

    3" Tu,uan Audit  

    #" pini Auditor  

    ." 1orma Pemeriksaan

    Computer Assisted Audit

    Techniques 2CAATs

     Atau

    Teknik Audit

     4erbantuan Komputer2TA4K • Catatan 4ronologis dari !enggunaan

    sum-er da)a sistem

    • Menca4u! user login= a4ses file= -er-agai

    a4tifitas lain= dan a!a4ah ada !elanggaran

     Paperless

         P   a   p   e   r     b   a   s   e

         d

    Aplikasi Komputer : Computer Assisted Audit TechniquesFarida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    42/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

    Lembar  Kerja Pemeriksaan Arround The Computer 

    •  Apakah kebijaksanaan pengamanan penggunaan

    aplikasi telah memperhatikan prinsip-prinsip

    umum kontrol aplikasi yang meliputi :

    • Pemisahaan tugas …….antara … pengguna,

    operasi, dan pengembangan Y/T 

    • Penggunaan … hanya …. yang berwenang Y/T 

    • enjamin …. data … telah di!alidasi

    Y/T 

    • enjamin … data yang ditrans"er benar dan

    lengkap Y/T 

    • Tersedianya jejak audit yang memadai serta

     penelaahan oleh pihak yang berwenang Y/T 

    • Tersedianya prosedur restart dan re#o!ery Y/T 

    Contoh>

    Aplikasi Komputer : Computer Assisted Audit TechniquesFarida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    43/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

    Through The Computer 

    Application Program

    Operating System

    Hardware

    Communication

    Control Program

    atabase

    !anagement

     System

    "n#rastructure

    $power% teleccomunication% etc&

    'ser Pro#ile

    Target Pemeriksaan

    Aplikasi Komputer : Computer Assisted Audit TechniquesFarida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    44/55

    Aplikasi Komputer : Computer Assisted Audit Techniques

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

    Lembar Kerja Pemeriksaan Through The $omputer 

    Transa#tion %orksheet 

     A. &nput $ontrol ' 

    (. Pro#essing $ontrol ' 

    $. )rror $orre#tion '  

    *. +utput $ontrol '  

    ). )nd *o#umentation '  

    . Authoriation '  

    . e#urity '  

    0. eparation o" *uties ' 

    &. ile aintenan#e '  

    System (

    Sub System (

    Transaction (

     

  • 8/18/2019 Kuliah ke-5(1)

    45/55

  • 8/18/2019 Kuliah ke-5(1)

    46/55

    Aplikasi Komputer : Computer Assisted Audit TechniquesFarida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    47/55

    p p p q

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

     Karakteristik pemilihan CAATs tools adalah :

    ,ase of use ,ase of data eBtraction

    The a-ilit) to access a wide variet) of data files fromdifferent !latforms The a-ilit) to integrate data with different format The a-ilit) to define fields and select from standard

    formats

    Menu6driven functionalit) for !rocessing anal)sis

    commands Sim!lified quer) -uilding and ad0ustments Logging features

    Aplikasi Komputer : Computer Assisted Audit TechniquesFarida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    48/55

    p p p q

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

    5hat is data 

    • aria/e+;ength 'ecords• :ata is Infor#ation

    Contoh data file eBtensions>

    Hfi8 Htxt8 Hdat8 Hcs-8 H*ks8 Hxs8 Hdoc8 H*pd8 Hd/f8 H#d/8

    datasets 4#ainfra#e68 Hd/2 4#ainfra#e6

    Aplikasi Komputer : Computer Assisted Audit TechniquesFarida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    49/55

    p p p q

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

    How to Access the Data Mainframe:  ,se data extract utiities 4iHeH JC;9SOCS'T6 to access the

    data and do*noad it in an ASCII+co#pati/e for#at for further anaysis on

    your PCH

    racle or other relational databases from =mid>ran%e? computers>  'un a

    7uery 4SN;6 to extract the ree-ant data and copy it do*n to an ASCII+co#pati/e for#atH r8 so#e data/ase appications8 such as race and

    PeopeSoft8 ha-e data extract or reporting utiities that you can run *ithout

    the need to ask for assistance fro# your IS :epart#ent 4as ong as

    appropriate e-es of access ha-e /een granted6H

     /ata (arehouses@

  • 8/18/2019 Kuliah ke-5(1)

    50/55

    p p p q

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

    7lat Sequential

     /base

    Te6t 

     /elimited 

     Print 7iles

    /4C 

    Tape

    Misaln)a > nama terdiri dari nama awal dan namaa4hir& Alamat terdiri dari alamat' dan alamat(

    Tipe data $an% diterima  AC

  • 8/18/2019 Kuliah ke-5(1)

    51/55

    p p p q

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

     Audit Command

  • 8/18/2019 Kuliah ke-5(1)

    52/55

    p p p q

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

     An AC< document contains batches; input file definitions;

    inde6es; ie!s; and !orkspaces and their specified

     formats" The computeried data and information that AC<

    anal$es is called a data file" The data files neer chan%e"

    The components sho!n in the document bo6 belo! are the

    elements that $ou create and manipulate

    The AC< /ocument 

    Aplikasi Komputer : Computer Assisted Audit TechniquesFarida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    53/55

    p p p q

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

     Menu 4ar 

    Aplikasi Komputer : Computer Assisted Audit TechniquesFarida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    54/55

    p p p q

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

     4utton 4ar 

    The button bar proides quick access  tocommonl$ used commands and menu options"

     8ach icon is linked to an option on an AC<

    menu and represents a specific task   $ou can

     perform"

    Aplikasi Komputer : Computer Assisted Audit TechniquesFarida Hermana

  • 8/18/2019 Kuliah ke-5(1)

    55/55

    IT Audit Caats Method Caats Selection ACL Software Matrikulasi MM Perbankan Audit Data

    • AC; https99***Hyoutu/eHco#9*atchR-f&?t#&!+O%,

    https://www.youtube.com/watch?v=fG7KtBiZxWYhttps://www.youtube.com/watch?v=fG7KtBiZxWYhttps://www.youtube.com/watch?v=Pe3G0ah06gghttps://www.youtube.com/watch?v=Pe3G0ah06gghttps://www.youtube.com/watch?v=Pe3G0ah06gghttps://www.youtube.com/watch?v=Pe3G0ah06gghttps://www.youtube.com/watch?v=fG7KtBiZxWYhttps://www.youtube.com/watch?v=fG7KtBiZxWY