Skip to content

CS Professional · Internal and Forensic Audit · Internal Audit of Specific Functions

An internal auditor wants to confirm that the production version of an accounting application is the same program version that was formally tested and approved by management. Which audit procedure is most suitable?

The most suitable procedure is comparing the production program with the approved tested version, supported by change records and version comparison. This gives direct evidence that no unauthorised changes were made. Manuals, interviews or recomputing depreciation do not verify program version integrity.

  1. AReviewing the user manual of the application
  2. BComparing the production program with the approved version, for example through code or version comparison and change recordsCorrect
  3. CInterviewing the finance head about satisfaction with the software
  4. DRecomputing depreciation for a sample of assets

Explanation

Only comparing the live program with the approved, tested version, supported by change management records, provides evidence of integrity of the version in use. A user manual or user satisfaction says nothing about version integrity, and recomputing depreciation tests a calculation, not program change control.

Did you get it right without looking?

One question tells you little. A timed set on Internal Audit of Specific Functions shows your real accuracy, how long you take and where you lose marks.

More Internal Audit of Specific Functions questions