Discuss the importance of Information Technology (IT) in enhancing internal controls within an organization. What are the circumstances under which manual elements should be used in internal control?

An entity's mix of manual and automated elements in internal control varies with the nature and complexity of the entity's use of IT. Generally, IT benefits an entity's internal control by enabling an entity to: Consistently apply predefined business rules and perform complex calculations in processing large volumes of transactions or data; Enhance the timeliness, availability, and accuracy of information; Facilitate the additional analysis of information; Enhance the ability to monitor the performance of the entity's activities and its policies and procedures; Reduce the risk that controls will be circumvented; and Enhance the ability to achieve effective segregation of duties by implementing security controls in applications, databases, and operating systems. Manual elements in internal control may be more suitable where judgment and discretion are required such as for the following circumstances: Large, unusual or non-recurring transactions. Circumstances where errors are difficult to define, anticipate or predict. In changing circumstances that require a control response outside the scope of an existing automated control. In monitoring the effectiveness of automated controls.