C9 Auditing Computer-Based IS

• Risks conducting an audit

• Inherent risk, control risk, detection risk

• Audit evidence

• Observation, review of documentation, discussions, questionnaires, physical examination, confirmation, reperformance, vouching, analytical review

-IS audits

• Parallel simulation, concurrent audit techniques, embedded audit modules