CA Final · Advanced Auditing, Assurance and Professional Ethics · Digital Auditing & Assurance
Sundaram & Co., chartered accountants, audit Kaveri Textiles Ltd, which runs a bespoke ERP. During planning, the engagement team plans to rely on automated three-way matching of purchase orders, goods receipt notes and supplier invoices to restrict payments. Which is the most appropriate auditor response under SA 315 (Revised) and SA 330 on this automated control?
The auditor should test the automated matching control with limited re-performance and also evaluate general IT controls over program changes and access. Automated controls run consistently unless altered, so effective ITGCs support a small test; assuming reliability without ITGC evaluation is not acceptable.
- ATest the automated control once by re-performing the matching on a sample and then assess whether general IT controls over program changes and access are effective, to conclude it operates consistently throughout the periodCorrect
- BIgnore the control because automated controls cannot be tested and perform only substantive procedures
- CTreat the control as effective for the full year simply because it is automated, with no testing of IT general controls
- DTest the control on a large sample of 60 transactions every quarter, as automated controls are as variable as manual ones
Explanation
Automated controls operate consistently unless the program is changed, so a test of one or few instances can suffice if effective general IT controls (change management, access) are also established. Assuming effectiveness without testing ITGCs is wrong because the program could have been altered. Large quarterly samples are unnecessary for a consistent automated control.
Did you get it right without looking?
One question tells you little. A timed set on Digital Auditing & Assurance shows your real accuracy, how long you take and where you lose marks.
More Digital Auditing & Assurance questions
- While auditing a manufacturing company, the auditor plans to use data analytics to test 100% of journal entries instead of a sample. The ext…
- CA Vivek audits Orchid Retail Ltd, which uses an automated tool that approves three-way matching of purchase orders, receipts and invoices w…
- CA Meera is auditing a company whose management uses an AI tool to generate estimates of expected credit losses. The auditor intends to use …
- CA Rohan, auditor of Bharat Logistics Ltd, notices that a database administrator of the company also has the access rights to post journal e…
- While auditing Sagar Pharma Ltd, CA Nikhil finds that the entity moved its payroll application to a third-party cloud service provider (a se…
- While auditing Kaveri Retail Ltd., the audit team uses a data analytics tool to test 100% of journal entries. The tool flags entries posted …