You are on page 1of 153







 












Abstract
Evaluating The Effectiveness Of Internal Control At Electronic
Accounting Information Systems

This study aims at evaluating the effectiveness of internal control at electronic


accounting information systems in Islamic banks in the Gaza Strip in the light
of robust advancing technology. Moreover, it seeks to indentify the ability of
these systems to provide suitable information in the right time for decision
makers. To achieve the study objectives and find answers to its questions, the
researcher depended on previous studies and related researches to gather
information. She managed to obtain secondary information, which formed the
theoretical frame of the study. Concerning the practical frame, the researcher
used a questionnaire designed for that purpose. The questionnaires were
distributed 48 copies and 43 ones were retrieved. The study included all
Islamic banks at the Gaza Strip (3 banks) and they have many branches located
in all governorates. The questionnaires were given to all employees work at
internal control department, internal auditors, accountants, directors of
branches and financial managers. The researcher conducted the necessary
analyses and assumptions.

Results:

The internal control system has the ability to detect error, cheating and
manipulation.
It has the ability to fulfill productive inventory at duties and tasks of
accounting information system.
It contributes to make each employee works under a direct supervision of a
manager who also assesses his performance, besides sticking to all laws and
regulations that call to respect morals.
The internal control system can indentify risks that face information security at
the information system and it can classify the stored information to be valuable
for decision makers.

Recommendations:

Stick to followed administrative and accounting policies by the supreme


administration.
Separate between duties of departments' managers and the execution of
financial transactions.
Establish an independent section to process data electronically at the
organizational structure.
Protect all existed files and machines from abuse.
Punish by the responsible administration upon detecting errors indicate
dishonesty or disloyalty in tasks accomplishment.
Provide a suitable job description that determines duties and authorities.
Consider the risks by the internal control system resulted from applying new
accounting systems and other risks connected to employees.














(Sig.)

(Sig.)
(Sig.)

(Sig.)

(Sig.)

(Sig.)
(Sig.)

(Sig.)


(Sig.)

(Sig.)

(Sig.)

(Sig.)

(Sig.)

(Sig.)

(Sig.)

(Sig.)

(Sig.)

(Sig.)

(Sig.)





Intosai
The International Organization of Supreme Audit Institutions
Committee of Sponsoring Organizations (COSO)
Committee of Sponsoring Organizations
(COSO)
"

"

Internal Auditing Profession IAP)


(Statement of Audit Standards) SAS

The Information System Audit and Control Foundation's COBIT


(Control Objectives for Information Technology )

The Institute of Internal Auditors Research Foundation's Systems


Auditability and Control (SAC)

The Committee of Sponsoring Organizations of the treadway


Commission's Internal Control Integrated Framework (COSO),

Accounting Information Systems

Information Technology (IT)

(O'Brien,1998)
:

.
.

.
:

.
.
:

.
.
.

74.4 %
.
.
63.2 %
.
.64.7 %
Wen and Deborah, 2007
'' Reducing the threat levels for Accounting Information Systems
Challenges for Management , Accountants, Auditors, and
Academicians''.

(Chow and Kato, 2006)


''The use of organization controls and their effects on data
manipulation and management myopia: A Japan vs. U.SA
comparison".

.
.

COBIT Case study ISACA, 2005


(COBIT) -

.
:
.

( Donald and, Oxner , 2001)


Internal Auditing in the Banking Industry Bank Accounting &
Finance
(Burtuon , 2000)
"Discussion of Information Technology ( Related Activities of Internal
Auditors)".

Efficiency
Economies Effectiveness
Mauldina and Ruchala, 1999
"Towards a meta-theory of accounting information systems".

(Hannaford, 1996)
''Can computer security really make a difference''.


Arens & Randal, 2005 


2007,Andrew & Audney

(SAS,No.1)
American Institute of Certified Public Accountants AICPA

(1983,AICPA

Arens, 2000


 Stephen, 1997

Keith, 2002

IFAC,

1998)

 




 1992 CSOTC






COSO

Arens & Randal, 2005

 Arens & Randal, 2005


Arens & Randal, 2005: 107



Arens,
2000


 Arens & Randal, 2005 



 














 Arens, 2000 

Arens & Randal, 


 2005








 Marshall & Paul, 2006 










 












 Marshall & Paul, 2006 

Arens,2000 






 



 Arens & Randal, 2005 






 
 







 



 

 




 


 




 Davies & Warman, 1992 

 



 Davies&Warman,1992 



 Arens, 2000



 






          
         
            
          


            
   
            
       
   















Data and information
System
Information System
Accounting Information Systems

.
.
.
          
         



          
           
         
  
          

           
          
  

Data and information


             
             
 Data
            
            

         information  
           
     
              
          

          
            
   
         
    Financial Accounting Standard Board FASB

         
 2000 Burtuon   

System

(Date,C,J, 2000)

             
            
        
          
2006 Marshall & Paul         

Information System

& Mauldina
1999 Ruchala

Inputs
Processing
 Outputs
Donald, 2001)

          Marshall & Paul  


          
      

           
          
1991 Boockholdt & david        

Accounting Information Systems





(Donald, 2001: 68)


Basic Terminology
2007 Robert & london

Debits & Credits

Basic Equation

2001 John Wiley & Sons

 Donald, 2001

(Richard, G, 2001)

Financial Accounting FASB

Standard Board

Relevance
.

 A.A.A 

Financial Accounting Standard Board FASB


:Timeliness

(Hendriksen & Michael, 1992)


Predictive Value

Feed Back Value

Feed Back

Thomas& Munter, 2002

Consistency

Winters, 1992

Comparability

( Lawrence & Dittehofer, 1996


(Reliability)

1995 Bodnar & William

Representational Faithfulness

1995 Bodnar & William


Verifiability

Objectivity

Neutrality

Bodnar &
1995 William
Kell & Walter, 2001
( , 1998)

:
          
           
            
          
           
      
        
         

  
   
     
      

  
           
          
            
  
            
            
           
       
            

           
            
(Http://infotech.aicpa.org, 2006)

           
          (SAS,No.3)

             
             

             
AICPA, 1980       
          
            
         
           
              
          
        
        
Greenstein & Vasarhelyi, 2000

   
          
       
           
          
AICPA, 1980       
          
          
           
IDver Card 
ID Card    
          
           
     
Deborah & Wen, 2007

         
        

    
    
   
      
        
         

 
     
      
    
Marshall & Paul, 2006        

      
        
          
            
          
           
          
    
            
Http://infotech.aicpa.org, 2006)   

      
         
          
AICPA, 1980  
Greenstein & Vasarhelyi, 2000

Deborah & Wen, 2007


    
          
 http://www.isaca.org     
          
         
           
         
          

           
           
     
             
          
          
Greenstein & Vasarhelyi, 2000   

     
 The International Standards Organization (ISO)  
         
          


IIA, 2005 

       
          
              
             
          
         
 http://www.isaca.org 
            
            
         
  

Patric & Blacker, 2000

Greenstein &
Vasarhelyi, 2000
Deloitte & Touche, 2003

Deborah & Wen, 2007

WWW.iia.org.uk


http://www.isaca.org

Deborah & Wen, 2007

Keith & Ardy, 1999

Patric & Blacker, 2000


Deloitte & Touche, 2003

The Committee of Sponsoring COSO


Organizations

AICPA,1994

The Institute of Internal Auditors Research (SAC)


Foundation's Systems Auditability and Control

Software

IIARF, 1994

:
     
    

Internal Validity

Structure Validity
Reliability

Internal Validity
*0.000 0.944 46 *0.000 0.875 23 *0.000 0.846 1
*0.000 0.874 47 *0.000 0.906 2
*0.000 0.773 48 *0.000 0.729 24 *0.000 0.854 3
*0.000 0.836 49 *0.000 0.782 25 *0.000 0.896 4
*0.000 0.656 50 *0.000 0.750 26 *0.000 0.678 5
*0.000 0.856 51 *0.000 0.634 27
*0.000 0.797 28 *0.000 0.765 6
*0.000 0.734 52 *0.000 0.755 29 *0.000 0.885 7
*0.000 0.855 53 *0.000 0.830 30 *0.000 0.828 8
*0.000 0.556 54 *0.000 0.715 31 *0.000 0.820 9
*0.000 0.663 55 *0.000 0.689 32
*0.000 0.859 56 *0.000 0.702 33 *0.000 0.913 10
*0.000 0.965 11
*0.000 0.854 57 *0.000 0.895 34
*0.000 0.904 58 *0.000 0.854 35 *0.000 0.968 12
*0.000 0.871 59 *0.000 0.793 36 *0.000 0.847 13
*0.000 0.726 37 *0.000 0.820 14
*0.000 0.764 60 *0.000 0.593 38
*0.000 0.780 61 *0.000 0.740 39 *0.000 0.817 15
*0.000 0.806 62 *0.000 0.867 16
*0.000 0.631 63 *0.000 0.751 40
*0.000 0.852 64 *0.000 0.680 41 *0.000 0.635 17
*0.000 0.813 65 *0.000 0.844 42
*0.000 0.783 18
*0.000 0.855 43 *0.000 0.758 19
*0.000 0.809 44 *0.000 0.844 20
*0.000 0.729 45 *0.000 0.872 21
*0.000 0.865 22
Structure Validity

(Sig.)
*0.002 0.454
*0.000 0.834
*0.000 0.836
*0.000 0.757
*0.000 0.725
*0.000 0.635
*0.000 0.656
*0.000 0.694
*0.000 0.701
*0.000 0.775
*0.000 0.831
*0.000 0.782
*0.000 0.740
*0.000 0.707
*0.000 0.819
*0.000 0.785
*0.000 0.938
*0.000 0.650
*
Reliability

Cronbach's Alpha Coefficient

0.948 0.899 5
0.958 0.918 12
0.960 0.922 6
0.960 0.922 10
0.972 0.945 18
0.970 0.941 14
0.987 0.973 65

0.945 0.899
0.973
0.972 0.948
0.987
Normality Distribution Test
Kolmogorov-Smirnov Test K-S)

(Sig.)

0.000

0.029

0.000

0.002

0.001

0.000

0.000

(Sig.)
0.05
Statistical
(SPSS) Package for the Social Sciences

Kolmogorov-Smirnov Test K-S)

Cronbach's Alpha
Spearman Correlation Coefficient

Sign Test

Mann-Whitney Test)

Kruskal Wallis Test )


Statistical Package for the Social Sciences (SPSS)

  
42.5 17
27.5 11 
30.0 12 
100.0 40 

42.5
30.0 %27.5
  
  
  
  

87.5
%12.5

  
 
  
  
  
  

60.0
2.5 15.0 22.5
  
2.5 1 
47.5 19 
50.0 20 
100.0 40 


 

  
17.5 7 
82.5 33
100.0 40 





  
97.5 39 
2.5 1 
100.0 40 




  
52.5 21 
10.0 4 
17.5 7 
20.0 8 
100.0 40 


  

Statistical Package for 0.05 Sig Sig > 0.05
(SPSS the Social Sciences

0.05 Sig Sig < 0.05


6LJ

 

2 *0.000 6.00 86.00 4.30

2 *0.000 5.92 86.00 4.30

1 *0.000 6.17 88.50 4.43




5 *0.000 5.92 85.00 4.25




4 *0.000 6.08 85.50 4.28



*0.000 6.17 86.20 4.31 
0.05


Sig   
0.05 

 Sig  
0.05


 Sig  

0.05

Committee of Sponsoring
(COSO) Organizations
6LJ

 

2 *0.000 6.17 86.00 4.30

3 *0.000 5.92 85.50 4.28

4 *0.000 6.00 85.00 4.25




1 *0.000 6.00 86.67 4.33



*0.000 6.17 85.75 4.29  
0.05

 Sig  
0.05

(COSO) Committee of Sponsoring Organizations


6LJ

 

1 *0.000 5.85 86.50 4.33




1 *0.000 5.85 86.50 4.33



*0.000 5.85 86.50 4.33  
0.05

4.33
0.000 Sig 5.85 86.50
0.05

Committee of Sponsoring Organizations (COSO)


Sig

 

1 *0.000 5.75 81.50 4.08




1 *0.000 5.92 81.50 4.08




3 *0.000 5.92 81.00 4.05



*0.000 6.00 81.33 4.07  
0.05

4.07
0.000 Sig 6.00 81.33
0.05
6LJ

 

1 *0.000 6.17 83.50 4.18




2 *0.000 5.76 81.50 4.08



*0.000 6.08 82.50 4.13  
0.05


 Sig  
0.05
  
        
         
  

6LJ

*0.000 5.92 82.00 4.10



0.05

  
 Sig 
0.05
Donald and, Oxner , 2001

Sig

*0.000 6.17 83.92 4.20 


0.05


 
 Sig
0.05
Committee of Sponsoring Organizations
(COSO)

(COSO)

(Donald and, Oxner , 2001)


Sig

 

6 *0.000 6.00 84.00 4.20




5 *0.000 6.08 84.50 4.23

2 *0.000 6.17 86.50 4.33




4 *0.000 5.92 84.50 4.23




1 *0.000 6.08 87.00 4.35

3 *0.000 6.00 86.00 4.30



*0.000 6.17 85.42 4.27  
0.05


 
 Sig 
0.05

 
 Sig 
0.05


Sig  

0.05
  
         
      
        
Sig

1 *0.000 6.17 86.00 4.30




1 *0.000 6.17 86.00 4.30



6 *0.000 6.08 85.00 4.25 

8 *0.000 5.92 83.50 4.18



4 *0.000 5.92 85.00 4.25 

7 *0.000 6.00 84.50 4.23




3 *0.000 5.92 85.50 4.28



4 *0.000 6.08 85.00 4.25 

9 *0.000 5.92 83.00 4.15




10 *0.000 6.00 82.00 4.10

*0.000 6.17 84.55 4.23  


0.05

Sig   
0.05 

 
 Sig 
0.05


Sig  

0.05

   Wen and Deborah, 2007


    

Sig

 

2 *0.000 5.68 84.50 4.23




2 *0.000 5.92 84.50 4.23




1 *0.000 6.00 85.00 4.25




6 *0.000 5.92 83.00 4.15



     
4 *0.000 6.00 84.00 4.20       

    
4 *0.000 6.00 84.00 4.20
    
*0.000 6.17 84.17 4.21 
0.05

Sig  
0.05 

 
 Sig 
0.05


 Sig  
0.05

        


          
ISACA, 2005    
 COBIT   
              
  

Sig

 

1 *0.000 6.00 85.00 4.25




3 *0.000 6.08 84.00 4.20




2 *0.000 5.83 84.50 4.23



*0.000 6.08 84.50 4.23  
0.05


 Sig  
0.05
 
 Sig 
0.05


 Sig  
0.05

  
        
       
Sig

 

2 *0.000 6.00 85.00 4.25




3 *0.000 6.00 83.50 4.18




1 *0.000 6.08 86.00 4.30



*0.000 6.17 84.83 4.24  
0.05


 Sig  
0.05

 
 Sig 
0.05

 Sig  
0.05

  
          
  
Sig

 

1 *0.000 5.83 85.13 4.26




4 *0.000 5.76 83.50 4.18



    
3 *0.000 6.00 83.50 4.18
 
     
2 *0.000 6.00 84.50 4.23
  

6 *0.000 6.08 83.00 4.15



       
5 *0.000 5.92 83.50 4.18
   
*0.000 5.85 83.83 4.19  
0.05

 
 Sig 
0.05
  
 Sig 
0.05


 Sig  
0.05

     

  
          
 


Sig

*0.000 6.17 84.22 4.21 


0.05


 
 Sig
0.05

ISACA, 2005
Sig

 

2 *0.000 6.00 82.05 4.10



    
3 *0.000 5.68 82.00 4.10
  
     
1 *0.000 6.17 83.50 4.18      
  

5 *0.000 5.92 82.00 4.10




3 *0.000 5.76 82.00 4.10



*0.000 6.17 82.40 4.12  
0.05
     
       
 
0.05   Sig


 Sig  
0.05


 Sig  
0.05


 
Sig

 

3 *0.000 5.76 83.00 4.15




1 *0.000 6.00 85.00 4.25




2 *0.000 6.00 84.50 4.23



*0.000 6.17 84.17 4.21  
0.05

 
 Sig  
0.05

 
 Sig  
0.05


 Sig  
0.05
Sig

 

4 *0.000 5.85 83.00 4.15




1 *0.000 6.08 84.50 4.23




6 *0.000 5.68 82.50 4.13




5 *0.000 6.00 82.50 4.13



    
3 *0.000 5.92 83.50 4.18      
  
      
2 *0.000 5.68 84.50 4.23

*0.000 5.67 83.42 4.17  
0.05


Sig  
0.05 
 
 Sig 
0.05


 Sig  
0.05


 
Sig

*0.000 5.66 83.21 4.16  

0.05


 
 6LJ
0.05
(Burtuon, 2000)

Sig

*0.000 6.17 84.27 4.21 


0.05


Sig  
0.05 

(Burtuon, 2000)


Sig
0.05

0.200 2 3.217 
0.463 2 1.542 
0.242 2 2.836 
0.442 2 1.631 
0.588 2 1.063 

0.665 2 0.815

0.479 2 1.471 
Sig
0.05

.781 -0.319 

.691 -0.435 

.317 -1.075 

.691 -0.440 

.449 -0.820 

.380 -0.945

.843 -0.225 


Sig
0.05

0.348 3 3.297 
0.282 3 3.820 

0.491 3 2.415 

0.259 3 4.018 

0.344 3 3.330 
0.857 3 0.768

0.481 3 2.470 

Sig
0.05


0.244 2 2.823 
0.220 2 3.025 
0.220 2 3.029 
0.523 2 1.295 
0.841 2 0.347 
0.323 2 2.261

0.197 2 3.249 

Sig
0.05


  

  

  

  

  

 

  

Sig
0.05




.150 -1.576 
.150 -1.535 

.100 -1.686 
.500 -0.888 
.700 -0.579 

.200 -1.502

.150 -1.517 






  

       
    






(IFAC)
1

www.arabinfo.com
www.ascasociety.org

177

7
. 2005
1- AICPA&CICA, ''Trust Services Principles, Criteria and Illustrations
for Security,Availability, Processing Integrity, Confidentiality, and
Privacy",Http://infotech.aicpa.org/Resources/System+Security+and+Re
lbility/ System +Relbility/Sevieces/SysTrust.,(2006).
2- American Institute of Certified Public Accountants (AICPA), Statement
on Auditing Standards No.30: Reporting on Internal Accounting
Control, Journal of Accountancy, (1980).
3- American Institute of Certified Public Accountants ( AICPA ),
Reporting an Entity Internal Control over Financial Reporting
Statement on Standards for Attestation Engagement , (1994) .
4- American Institute of Certified Public Accountants ( AICPA ), Audit
Risk and Materiality in Conducting Related Matters Noted in an
Audit (SAS 60), (1983) .
5- Arens , Alvin , Lobbecke, James K, Auditing : An Integrated
Approach , Prentice. Hall International Inc . (8th ed), (2000).
6- Arens, Alvin A , Randal Jandal J. elder & Mark S. Beasley , Auditing
An Integrated Approach , Pearson Education , Inc (10th ed ), (2005).
7- Andrew ,Bailey, Audney ,Gramling, Research Opportunities in Internal
Auditing, The Institute of Internal Auditors (IIA) , (2003).
8- Stephen ,Beckwith, Internal Audit-Principles and Practice,
Euromoney Training Centre, London , (1997) .
9- Bodnar, Jeorge H & William S. Hopwood, Accounting Information
System, Englewood , (1995).
10- Keith, Brooks, Operational Risk Audit, Euromoney Training Centre ,
London ,( 2002).
11- Burtuon,Richad N , "Discussion of Information Technology. Related
Activities of Internal Auditors", Jornal of Information Systems,(2000).
12- HannaFord, C. S. "can computer security really make a difference",
Managerial Auditing Journal, , AICPA, SAS: No. 1, (1996).
13- Chow Chee W & Kato Yutaka, "The use of organization controls
and their effects on data manipulation and management and
management myopia: A Japan vs. U.SA comparison, Accounting
Organizations and Society", Vol21,(2006).
14- Committee of Sponsoring Organizations of the Treadway Commission
(COSO), Internal Control Integrated Framework, New Jersy (1992).
15- Committee of Sponsoring Organizations of the Treadway Commission
(CSOTC ), Internal Control Integrated Framework (COSO Report ),
(1992) .
16- Date,C. J. An Introduction to Database Systems, Seven Edition,
Addison-Wesley publishing Company, ( 2000).
17- Davies & A. Warman, coputer and Fraud: The Role Of The
Accountant, Management Accounting, Sep (1992).
18- Deborah & Wen , Joseph, ''Reducing the threat levels for Accounting
Information Systems Challenges for Management , Accountants,
Auditors, and Academicians'',The CPA Journal Publication of the New
York state society of CPA, online , (2007).
19- Deloitte & Touche LLp , IT Control Objectives for Sarbanes Oxley.
New Guidence on IT Control and Compliance, (2003).
20- Donald , Edwards & Oxner,Tom, "Internal Auditing in the Banking
Industry Bank Accounting & Finance", (Euromoney Publications
PLC), (2001).
21- Greenstein, M. & Vasarhelyi,M, Accounting Information
Technology,and Business Soluution,2nd Edition,MC, Graw-Hill,
NewYork, (2000).
22- Hendrickson, S. Eldon. and Michael F. Van Breda, Accounting
Theory, Fifth Edition, (1992).
23- ( ISACF ) Information Systems Audit and Control Foundation,
COBIT: Control Objectives for Information and Related Technology,
(1995).
24- (IIARF) Institute of Internal Auditors Research foundation, Systems
Auditability and control, (1994).
25- The Institute of Internal Auditors ( IIA ), Internal Control
Integrated Framework, Evaluation Tools, (1994).
26- ISACA, COBIT Case study : "Charles Schwab"
,http://www.isaca.org/Template.cfm?Section=Case_Studies3&CONTE
NTID=8036&TEMPLATE=/Content
Management/ContentDisplay.cfm, USA ,(2009).
27- Boockholdt & david h ,Accounting information systems :transaction
processing and controls , boston,irwin (1991).
28- Wiley ,John & Sons, Schroeder, G. Richard, Myrtle W, Accounting
Theory and Analyses,( 2001).
29- Kell , Johson , & Walter G . Boynton , William C , Modern Auditing ,
Raymond N . 4John Wiley & Sons , (2001).
30- Kieso, Donald, Intermediate Accounting,Tenth edition, (2001).
31- Marshall, Romney & Paul, john Steinbar , Accounting information
systems , 10th ed. new jersey:pearson education, (2006).
32- Mauldina,Elaine & Ruchala, Linda " Towards a meta-theory of
accounting information systems", Accounting, Organizations and
Society 24 (1999).
33- Patric, Connell, & Blacker, Keith, An Approaches to Modeling
Operational Risk in Banks, Henley Management College, Green Lands, ,
(2000).
34- anagement Information Systems, Managing
information Technology in networked Enterprise,Chicago,(1998).
35- Thomas ,Ratcliffe, & Munter, Paul, Information Technology , Internal
Control, and Financial Statement Audits , The CPA Journal . (2002) .
36- Robert, hurt hill& London, thomson , Accounting information systems :
basic concepts & current issues , south-western, (2007).
37- Lawrence ,Sawyer & Dittehofer, Mortimer, Sayer's International
Auditing , The Institute of Internal Auditors , (1996).
38- Richard G., Schroeder, Accounting Theory and Analyses, (2001).
39- The Institute of Internal Auditors (IIA), Reporting of Internal Control,
London, (2005).
40- The Institute of Internal Auditors UK And Ireland, The Role of Internal
Auditors in Risk Management, WWW.iia.org.uk .
41- Treadway, J.C.,Report of the National Commission on Fraudulent
Financial Reporting, National Commission on Fraudulent Financial
Reporting, Washington,D.C. (1987).
42- Keith ,Wade & Ardy Wyme, Control Self Assessment for Risk
Management and Other Practical Application, (1999) .
43- Winters, Guy, Internal Control :Progress and Perils, Proceeding of the,
University of Kansas Symposium on Auditing problems , (1992).
Tread way commission (COSO)
.

    
 

    
   

      
    
.
.

.


You might also like