In general, the internal control of an organization has mix of manual and automated controls and each type of control has its own limitations. In view of this statement, explain the different limitations as faced by auto

CS Professional · Governance, Risk Management, Compliances and Ethics · PYQS · June 2024
In general, the internal control of an organization has mix of manual and automated controls and each type of control has its own limitations. In view of this statement, explain the different limitations as faced by automated IT controls.

Answer & Explanation:

Specific limitations related to an entity's automated IT internal control, includes: Reliance on systems or programs that are inaccurately processing data, processing inaccurate data, or both. Unauthorized access to data that may result in destruction of data or improper changes to data, including the recording of unauthorized or non-existent transactions, or inaccurate recording of transactions. Particular risks may arise where multiple users access a common database. The possibility of IT personnel gaining access privileges beyond those necessary to perform their assigned duties thereby breaking down segregation of duties. Unauthorized changes to data in master files. Unauthorized changes to systems or programs. Failure to make necessary changes to systems or programs. Inappropriate manual intervention. Potential loss of data or inability to access data as required.

Topics: Internal Control

Open in Interactive Practice Hub · Full Practice Hub · Chapter Weightage · More in this subject

Related Questions in this Topic