The specialised nature of information systems (IS) auditing and the skills necessary to perform such audits require standards that apply specifically to IS auditing. One of the goals of the Information Systems Audit and Control Association (ISACA) is to advance globally applicable standards to meet its vision. The development and dissemination of the IS Auditing Standards are a cornerstone of t...

The concept of a “Fraud Triangle” is introduced to the professional literature in SAS No. 99, Consideration of Fraud in a Financial Statement Audit. The Fraud Triangle consists of three conditions generally present when fraud occurs: Incentive/Pressure, Opportunity, and Attitude/ Rationalizations. Input from forensic experts, academics and others consistently show that evaluation of information...

XBRL is a computer language add-on that facilitates the rendering of financial information. Its development has been accompanied by claims that XBRL will, among other things, lead to continuous reporting and eliminate financial reporting differences including differences between jurisdictional GAAP. These discussions have largely ignored the literature on voluntary disclosures and earnings mana...

Why are auditors unable to detect fraudulent financial reporting in some audits? Should auditors be able to anticipate when fraud is likely to occur? Various studies have discussed not only the need for experience and supervision of auditors, but also the effect of decision models, and even expert systems, on fraud detection and the study of internal controls. This paper presents a discussion o...

Auditing tools can play a key role in the continuous improvement of maintenance policies, in particular to enhance predictive maintenance (PM). This paper proposes a multi-criteria model for auditing a Predictive Maintenance Programme (PMP) developed and implemented in the General Hospital of Ciudad Real (GHCR) in Spain. The model has a two-level structure, with top level auditing areas specifi...

The risk exposure of an organization is the cost of being noncompliant for all process instances that are subject to auditing and it can be reduced by auditing internal controls for every process instance, detecting and eliminating the cause of non-compliance. This paper discusses the design consideration for an automated auditing tool to achieve the desired level of risk exposure reduction. A ...