An internal auditor observed that sales staff are able to modify or cancel an order in the system prior to shipping* She wonders whether they can also modify orders after shipping. Which of the following types of controls should she examine?
The internal auditor should examine application controls, which directly relate to specific computer applications. These controls ensure the accuracy, completeness, and authorization of transactions processed by the system. Since the auditor's concern is whether sales staff can modify orders after shipping, which involves transactional changes in a specific application, application controls are the appropriate focus.
Information systems auditing standards and best practices.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit