ACL 9 -- Tutorial 1

ACL 9 Tutorial 1 COMMANDS:

 ANALYZE -> TOTAL  ANALYZE  ANALYZE  ANALY ZE -> PROFILE  ANALYZE  ANALY ZE -> STATISTICS SAMPLING -> SAMPLE  ANALYZE  ANALY ZE -> SEQUENCE DATA -> SORT  ANALYZE  ANALY ZE -> DUPLICATES  ANALYZE  ANALY ZE -> GAPS

The tutorials in this folder are supplemental exercises that relate to ACL 9 topics covered in chapters 8, 9, 10, and 12 in the Hall, IT Auditing , 3rd edition textoo!" The tutorials tutorials presume that the student has installed ACL from from the C# accompan$in% the text and has &or!ed throu%h the ACL'tart"pdf document in the ACL ACL (anual folded" The tutorials are not a sustitute sustitute for this  asic ACL ACL !no&led%e" These tutorials use data tales stored in the 'ample )ro*ect"acl that is automaticall$ installed &ith ACL" +pen the sample pro*ect and clic! clic! on the appropriate tale to perform perform the tutorial" The The name of the tale is indicated in old t$pe prior to each section in the tutorial e"%" AP TRANS-" AP_TRANS

1" .sin% th the TOTAL command, develop a hash control total and an amount control total for A)/TA'" #evelopin% hash control total entails 'ummation of numers nu mers havin% no practical meanin% as a control precaution used $ auditors primaril$ in a computer application" The purpose is to identif$ &hether a record has een lost or omitted from processin%" or example, chec! numers ma$ e summed to %et a hash total" 4f the total of the chec! numers  processed does not a%ree &ith the hash total, a discrepanc$ exists, and investi%ation is re5uired to uncover the error" or example, &e have 6 records7 ecord17 100"02 for 4nvoice numer ecord27 101"01 for )roduct numer  ecord37 200"1 for vendor numer ecord 67 300"0: for #ate The hash control total &ould e calculated li!e this7 10002 ; 10101 ; 2001;3000: < :012 © 2011 2011 Cengage  Cengage Learning. All Righ! Re!er"e#. Ma$ n% &e !'anne#( '%)ie# %r #*)li'ae#( %r )%!e# % a )*&li'l$ a''e!!i&le +e&!ie( in +h%le %r in )ar.

The hash total is :012 &hich should e outputted as7 =0000000000:012= An amount control total for A)/TA' is

>hat recommendation &ould $ou ma!e to develop a field for hash control total? There should e source document control in &hich control for exposure, control  procedures are needed over source documents to account for each field for hash control total throu%h the use of uni5uel$ pre/numered source documents, .se source documents in se5uence and periodicall$ audit source documents 1" un PROFILE on the file, 4nvoice Amount"

© 2011 Cengage Learning. All Righ! Re!er"e#. Ma$ n% &e !'anne#( '%)ie# %r #*)li'ae#( %r )%!e# % a )*&li'l$ a''e!!i&le +e&!ie( in +h%le %r in )ar.

Can $ou determine if there are an$ ne%ative transactions? @xplain"

There &as no ne%ative transaction ased on the testin% of the invoice amount, product 5uantit$ and the unit cost of the four fields"

© 2011 Cengage Learning. All Righ! Re!er"e#. Ma$ n% &e !'anne#( '%)ie# %r #*)li'ae#( %r )%!e# % a )*&li'l$ a''e!!i&le +e&!ie( in +h%le %r in )ar.

2" un STATISTICS on each of the four availale fields &ith the 'td #ev ox chec!ed"

© 2011 Cengage Learning. All Righ! Re!er"e#. Ma$ n% &e !'anne#( '%)ie# %r #*)li'ae#( %r )%!e# % a )*&li'l$ a''e!!i&le +e&!ie( in +h%le %r in )ar.

#escrie $our audit direction to specific invoices ased on the results of 'TAT4'T4C'"

The auditor should consider the tolerable rate of deviation from the controls being tested in determining specific invoices and more importantly Re"ie+( anal$,e an# in"e!igae !)e'ii' in"%i'e! a! a))r%)riae 3" un SAMPLE 'amplin% / 'ample- for the A)TA' file, usin% the data from step 3" 'ample 4nvoice Amount, 4nterval of B,09, De%in B16"88 minimum invoice- and Cutoff B,::"20" 'ave results as A)Trans'ample"

AR 

6" un SEQUENCE on A, usin% 4nvoice umer efo-" (a!e sure to use onl$ 4nvoice T$pe Transactions E4F- use @xpression Duilder to filter out other transaction t$pes"

© 2011 Cengage Learning. All Righ! Re!er"e#. Ma$ n% &e !'anne#( '%)ie# %r #*)li'ae#( %r )%!e# % a )*&li'l$ a''e!!i&le +e&!ie( in +h%le %r in )ar.

 >hat do $ou notice aout the invoice numers? " e/run SEQUENCE on the same file ut this time chec! E#uplicatesF and EGapsF filter 4nvoice t$pe transactions onl$-"

© 2011 Cengage Learning. All Righ! Re!er"e#. Ma$ n% &e !'anne#( '%)ie# %r #*)li'ae#( %r )%!e# % a )*&li'l$ a''e!!i&le +e&!ie( in +h%le %r in )ar.

>hat information is provided to the auditor aout testin% invoices?  10 se5uence errors &ere detected &ith seven characters and numeric 4nvoice transaction t$pe "   SORT A $ 4nvoice Amount in descendin% order" .se Sort On to specif$ descendin% order" 'pecif$ T)@ E4F" .se Output File  name A'ortAmount"

>hat sort of anomalies is the auditor loo!in% for? Auditors mi%ht e loo!in% for duplicated transactions, %aps et&een the transaction se5uences, possile ne%ative transactions and other evidences to support the audit &or!" This in a vie& to %ather audit evidence in line &ith the audit o*ectives re5uirin% effective procedures and test of controls or control procedure to e conducted"

© 2011 Cengage Learning. All Righ! Re!er"e#. Ma$ n% &e !'anne#( '%)ie# %r #*)li'ae#( %r )%!e# % a )*&li'l$ a''e!!i&le +e&!ie( in +h%le %r in )ar.