pathfinder - The Institute of Chartered Accountants of Nigeria

PATHFINDERCandidates shied away from the question. Their lack of knowledge of this part is“unpardonable”. Candidates are advised to consolidate their knowledge in this areaof the syllabus.QUESTION 5(a)Reasons for carrying out computer information system auditThe observable trend is that there are innumerable risks associated withcomputerised business environment.The auditor would ensure that adequate controls are instituted to mitigate theinnumerable risks associated with the computerised environment as analysedbelow:i. Prevention of data loss or other kinds of disasters with a view tomaintaining the integrity of data.ii.iii.iv.Malicious destruction of electronic informationEnsuring that valuable information is not stolen.Mitigating the risk of hacking by malicious agents.v. Preventing espionage activitiesvi.vii.viii.Ensuring that computer viruses and worms are curtailed.Preventing unauthorized access to information and data.Preventing computer fraud, abuse and privacy violations.(b)Auditors‟ role in Information Technology controls implementation includes thefollowing:(i)(ii)(iii)Serving as specialists in the Information Technology Strategy Committee,to offer advice on matters concerning Information Technology controls.Auditors should be members of Information Technology steeringcommittee as key advisors.Auditors should ascertain the management framework for InformationTechnology governance, e.g. Control Objective for InformationTechnology (COBIT), Committee of Sponsoring Organisation (COSO).INTERMEDIATE EXAMINATION - NOVEMBER 201049