ACIS Course Outline

Grading
Topics
Period

MIDTERM Review of Basic Computer Concepts

1. Data vs. Information

2. Modes of data processing
3. Definition of computer
4. Elements of a computer system
5. Hierarchy of data
6. File access methods
7. Modes of computer processing

Auditing and Internal Control

1. Attestation vs. Advisory Services

2. Types of audits
3. Structure of an IT Audit; Audit issues and implications related to Sarbanes-
Oxley legislation
Conceptual framework that links general controls, application controls, and
financial data integrity

Auditing IT Governance Controls

1. Definition of IT governance and the elements of IT Governance

2. Exposures that can arise from inappropriate structuring of the IT function
3. Computer center threats and controls
4. Key elements of a disaster recovery plan
Issues concerning the growing trend toward IT outsourcing

Auditing Operating Systems and Networks

1. Auditing operating systems

a. Operating system objectives and security
b. Threats to operating system integrity
c. Operating system controls and audit tests
2. Auditing networks
a. Intranet risks
b. Internet risks
c. Controlling networks
d. Controlling risks from subversive threats
e. Controlling risks from equipment failure
3. Auditing electronic data interchange (EDI)
a. EDI standards
b. Benefits of EDI
c. Financial EDI
d. EDI controls
4. Auditing PC-Based Accounting Systems
 PC systems risks and controls

MIDTERM Auditing Database Systems

1. Database management approaches

a. Flat file approach
b. Database approach
2. Key elements of the database environment
a. Database management system
b. Users
c. Database administrator
d. Physical database
e. DBMS models
(i) Hierarchical
(ii) Network
(iii) Relational
3. Databases in a distributed environment
a. Centralized databases
b. Distributed databases
c. Partitioned databases
d. Replicated databases
Controlling and auditing data management systems

MIDTERM Systems Development and Program Change Activities

1. Roles of participants involved in developing an organization’s

information system.
2. Key activities that constitute the systems development life cycle
(SDLC)
a. Systems planning
b. Systems analysis
c. Conceptual design
d. System selection
e. Detailed design
f. System implementation
g. Program change procedures (systems maintenance)
SDLC risks, controls and audit issues.

MIDTERM Transaction Processing and Financial Reporting Systems Overview

1. Overview of transaction processing

2. Relationship among accounting records in forming an audit trail (manual
and computer-based systems)
3. Documentation techniques (manual and computer-based systems)
4. Fundamental features of batch and real-time technologies and their
implication for transaction processing
5. Data coding schemes and their role in transaction processing
The central role of the general ledger as a hub that connects TPS applications and
provides input to the FRS

FINALS Computer Assisted Audit Tools and Techniques

 1. Application Controls
a. Classes of application controls
(i) Input controls
(ii) Processing controls
(iii) Output controls
b. Approaches to testing application controls
(i) Black box
(ii) White box
2. CAATT approaches used for testing application logic
a. Test data
b. Base case system evaluation
c. Tracing
d. Integrated test facility
Parallel simulation

FINALS CAATTs for Data Extraction

1. General categories
a. Embedded audit modules
b. General audit software
2. Features, advantages and disadvantages of the embedded audit module
approach.
3. Typical functions and uses of generalized audit software
Key features of audit command language (ACL)

FINALS Auditing the Revenue Cycle

1. Revenue cycle audit objectives, controls, and tests of

controls
Revenue cycle substantive tests

Auditing the Expenditure Cycle

1. Expenditure cycle audit objectives, controls, and tests of controls

Expenditure cycle substantive tests

Enterprise Resource Planning Systems

1. Key features of a generic ERP system

2. ERP configurations related to servers, databases, and bolt-on software.
3. Data warehousing
4. Key risks associated with ERP implementation
5. Internal control and auditing issues related to ERPs
Leading ERP software products.