Explorer

The firm selected for testing certain automated and IT-dependent manual controls over revenue and inventory. The firm's approach to testing the accuracy and completeness of the data used in these controls depended on effective IT general controls including controls over user access. As a result of the deficiency in the firm's testing of the controls the firm's testing of these automated and IT-dependent manual controls was not sufficient. (AS 2201.46)

The firm selected for testing certain automated and IT-dependent manual controls over revenue and inventory. The firm's approach to testing the accuracy and completeness of the data used in these controls depended on effective IT general controls including controls over user access. As a result of the deficiency in the firm's testing of the controls the firm's testing of the automated controls was not sufficient because the firm did not test the configuration or programming of these controls or perform other procedures that would have provided sufficient appropriate audit evidence that these controls were designed and operating effectively. (AS 2201.42 and .44)

The issuer used multiple information technology (IT) applications to initiate process and record transactions related to revenue and related accounts and inventory. The firm selected for testing certain automated and IT-dependent manual controls that used data and reports generated or maintained by certain of these applications. The accuracy and completeness of these data and reports depended on effective IT general controls (ITGCs). As a result of the following deficiencies in the firm's testing of ITGCs the firm's testing of these automated and IT-dependent manual controls was not sufficient. (AS 2201.46)

The issuer used multiple information technology (IT) applications to initiate process and record transactions related to revenue and related accounts and inventory. The firm selected for testing certain automated and IT-dependent manual controls that used data and reports generated or maintained by certain of these applications. The accuracy and completeness of these data and reports depended on effective IT general controls (ITGCs). - The firm did not sufficiently test change management controls because the firm did not consider all program changes in making its selections for testing. (AS 2201.42 and .44)

The issuer used multiple information technology (IT) applications to initiate process and record transactions related to revenue and related accounts and inventory. The firm selected for testing certain automated and IT-dependent manual controls that used data and reports generated or maintained by certain of these applications. The accuracy and completeness of these data and reports depended on effective IT general controls (ITGCs). - The firm did not sufficiently test privileged access controls because the firm did not (1) consider all privileged access users in making its selections for testing and (2) test the procedures that control owners performed to evaluate the appropriateness of access. (AS 2201.42 and .44)

The issuer used multiple information technology (IT) applications to initiate process and record transactions related to revenue and related accounts and inventory. The firm selected for testing certain automated and IT-dependent manual controls that used data and reports generated or maintained by certain of these applications. The accuracy and completeness of these data and reports depended on effective IT general controls (ITGCs). - The firm did not sufficiently test the periodic user account review control because the firm did not sufficiently evaluate whether the control as designed could effectively prevent or detect a material misstatement because the firm did not consider whether every user was assigned to an approver or the appropriateness of permissions granted to roles. (AS 2201.42 and .44)

The issuer used multiple information technology (IT) applications to initiate process and record transactions related to revenue and related accounts and inventory. The firm selected for testing certain automated and IT-dependent manual controls that used data and reports generated or maintained by certain of these applications. The accuracy and completeness of these data and reports depended on effective IT general controls (ITGCs). - The engagement team did not identify and test any controls over the accuracy and completeness of user access lists used in the operation of the control including whether all users were included and all access roles for each user were listed for review. (AS 2201.39)

The issuer used an information-technology (IT) application to generate reports from various systems that processed and recorded revenue and inventory transactions. The following deficiencies were identified: · The firm selected for testing various IT-dependent manual controls over this revenue and inventory that used these reports. As a result of the deficiencies discussed above the firm's testing of these manual controls was not sufficient. (AS 2201.46)

The issuer used an information-technology (IT) system to initiate process and record transactions related to inventory at one business unit. In its testing of controls over this inventory the firm tested various automated and IT-dependent manual controls that used data and reports generated or maintained by this IT system. As a result of deficiencies in the firm's testing of IT general controls (ITGCs) the firm's testing of these automated and IT-dependent controls was not sufficient. (AS 2201.46)

The issuer used an information-technology (IT) system to initiate process and record transactions related to inventory at one business unit. In its testing of controls over this inventory the firm tested various automated and IT-dependent manual controls that used data and reports generated or maintained by this IT system. · With respect to change management the firm selected for testing a control over the issuer's review of changes to the production environment for this IT system. The firm did not test the aspects of this control that addressed whether unauthorized changes could be made directly to the production environment. (AS 2201.42 and .44)

The issuer processed and recorded transactions related to revenue inventory and sales commission expense and sales commission payable using several information-technology ('IT') systems including its enterprise resource planning ('ERP') system. The accuracy and completeness of the data and reports from the ERP system depended on effective IT general controls ('ITGCs'). The firm identified a significant deficiency in ITGCs related to user access to the ERP system. The firm selected for testing various controls over inventory that used data maintained by the ERP system. The firm's testing of these controls was not sufficient because it did not consider the implications of the ineffective ITGCs over this system as discussed above. (AS 2201.46)

The issuer processed and recorded transactions related to revenue inventory and sales commission expense and sales commission payable using several information-technology ('IT') systems including its enterprise resource planning ('ERP') system. The accuracy and completeness of the data and reports from the ERP system depended on effective IT general controls ('ITGCs'). The firm identified a significant deficiency in ITGCs related to user access to the ERP system. The firm selected for testing an automated control that consisted of the recording of inventory upon receipt. The firm did not obtain an understanding of how the system was configured to initiate process and record the receipt of inventory. As a result the firm did not test the configuration of this control or perform other procedures that would have provided sufficient appropriate audit evidence that the control was designed and operating effectively. (AS 2201.34 .42 and .44)