Identifying the Absence of Effective Internal Controls: An Alternative Approach for Internal Control Audits

Michael Werner, Nick Gehrke

Publikation: Bidrag til tidsskriftTidsskriftartikelForskningpeer review

Resumé

Auditors face new challenges when auditing internal controls due to the increasing integration of information systems for transaction processing and the growing amount of data. Traditional manual control testing procedures become inefficient or require highly specialized and scarce technical knowledge. This study presents audit procedures that follow a new approach. Instead of manually testing internal controls, automated procedures search for the absence of those controls. Process mining techniques are combined with advanced statistical analysis where process mining serves as a data analysis technique to create process models from the recorded transaction data. These are searched for critical data constellations in combination with an exploratory factor analysis to identify systematic deficiencies in the internal control system. The manual and time intensive inspection of individual controls is replaced by automated audit procedures that cover the totality of recorded transactions. The study follows a design science approach and uses case study data for illustration.
OriginalsprogEngelsk
TidsskriftThe Journal of Information Systems
Vol/bind33
Udgave nummer2
Sider (fra-til)205-222
Antal sider18
ISSN0888-7985
DOI
StatusUdgivet - jun. 2019

Bibliografisk note

Published online: 20. March 2018

Emneord

  • Auditing
  • Internal control system
  • Monitoring
  • Compliance
  • Data analysis
  • Journal entry data
  • Process mining
  • Enterprise resource planning systems
  • Exploratory factor analysis
  • Indicators

Citer dette

@article{79d8761c682e4b64b8fa041c472b951d,
title = "Identifying the Absence of Effective Internal Controls: An Alternative Approach for Internal Control Audits",
abstract = "Auditors face new challenges when auditing internal controls due to the increasing integration of information systems for transaction processing and the growing amount of data. Traditional manual control testing procedures become inefficient or require highly specialized and scarce technical knowledge. This study presents audit procedures that follow a new approach. Instead of manually testing internal controls, automated procedures search for the absence of those controls. Process mining techniques are combined with advanced statistical analysis where process mining serves as a data analysis technique to create process models from the recorded transaction data. These are searched for critical data constellations in combination with an exploratory factor analysis to identify systematic deficiencies in the internal control system. The manual and time-intensive inspection of individual controls is replaced by automated audit procedures that cover the totality of recorded transactions. The study follows a design science approach and uses case study data for illustration.",
keywords = "Auditing, Internal control system, Monitoring, Compliance, Data analysis, Journal entry data, Process mining, Enterprise resource planning systems, Exploratory factor analysis, Indicators, Auditing, Internal control system, Monitoring, Compliance, Data analysis, Journal entry data, Process mining, Enterprise resource planning systems, Exploratory factor analysis, Indicators",
author = "Michael Werner and Nick Gehrke",
note = "Published online: 20. March 2018",
year = "2019",
month = "6",
doi = "10.2308/isys-52112",
language = "English",
volume = "33",
pages = "205--222",
journal = "The Journal of Information Systems",
issn = "0888-7985",
publisher = "American Accounting Association",
number = "2",

}

Identifying the Absence of Effective Internal Controls : An Alternative Approach for Internal Control Audits. / Werner, Michael ; Gehrke, Nick.

I: The Journal of Information Systems, Bind 33, Nr. 2, 06.2019, s. 205-222.

Publikation: Bidrag til tidsskriftTidsskriftartikelForskningpeer review

TY - JOUR

T1 - Identifying the Absence of Effective Internal Controls

T2 - An Alternative Approach for Internal Control Audits

AU - Werner, Michael

AU - Gehrke, Nick

N1 - Published online: 20. March 2018

PY - 2019/6

Y1 - 2019/6

N2 - Auditors face new challenges when auditing internal controls due to the increasing integration of information systems for transaction processing and the growing amount of data. Traditional manual control testing procedures become inefficient or require highly specialized and scarce technical knowledge. This study presents audit procedures that follow a new approach. Instead of manually testing internal controls, automated procedures search for the absence of those controls. Process mining techniques are combined with advanced statistical analysis where process mining serves as a data analysis technique to create process models from the recorded transaction data. These are searched for critical data constellations in combination with an exploratory factor analysis to identify systematic deficiencies in the internal control system. The manual and time-intensive inspection of individual controls is replaced by automated audit procedures that cover the totality of recorded transactions. The study follows a design science approach and uses case study data for illustration.

AB - Auditors face new challenges when auditing internal controls due to the increasing integration of information systems for transaction processing and the growing amount of data. Traditional manual control testing procedures become inefficient or require highly specialized and scarce technical knowledge. This study presents audit procedures that follow a new approach. Instead of manually testing internal controls, automated procedures search for the absence of those controls. Process mining techniques are combined with advanced statistical analysis where process mining serves as a data analysis technique to create process models from the recorded transaction data. These are searched for critical data constellations in combination with an exploratory factor analysis to identify systematic deficiencies in the internal control system. The manual and time-intensive inspection of individual controls is replaced by automated audit procedures that cover the totality of recorded transactions. The study follows a design science approach and uses case study data for illustration.

KW - Auditing

KW - Internal control system

KW - Monitoring

KW - Compliance

KW - Data analysis

KW - Journal entry data

KW - Process mining

KW - Enterprise resource planning systems

KW - Exploratory factor analysis

KW - Indicators

KW - Auditing

KW - Internal control system

KW - Monitoring

KW - Compliance

KW - Data analysis

KW - Journal entry data

KW - Process mining

KW - Enterprise resource planning systems

KW - Exploratory factor analysis

KW - Indicators

UR - https://sfx-45cbs.hosted.exlibrisgroup.com/45cbs?url_ver=Z39.88-2004&url_ctx_fmt=info:ofi/fmt:kev:mtx:ctx&ctx_enc=info:ofi/enc:UTF-8&ctx_ver=Z39.88-2004&rfr_id=info:sid/sfxit.com:azlist&sfx.ignore_date_threshold=1&rft.object_id=958480169461&rft.object_portfolio_id=&svc.holdings=yes&svc.fulltext=yes

U2 - 10.2308/isys-52112

DO - 10.2308/isys-52112

M3 - Journal article

VL - 33

SP - 205

EP - 222

JO - The Journal of Information Systems

JF - The Journal of Information Systems

SN - 0888-7985

IS - 2

ER -