and understand how a system works (e.g., auditors need to assess risk) • Sarbanes-Oxley Act (SOX) requires management to assess internal controls and auditors to evaluate the assessment • Used for systems development and changes
3-3 • Documentation- explains how a system works, including the who, what, when, where, why and how of data entry, data processing, data storage, information output, and system controls.
• Narrative description- written step-by-strep
explanation of system components and how they interact
3-9 Types of Flowcharts • Document: shows the flow of documents and data for a process, useful in evaluating internal controls • System: depicts the data processing cycle for a process • Program: illustrates the sequence of logic in the system process
• Narrative description • Flowchart • Data flow diagram (DFD) • Document flowchart • Data source • Internal control flowchart • Data destination • System flowchart • Data flow • Program flowchart • Process • Business process diagram • Data store (BPD)