Continuous auditing in ERP system environments: The current state and future directions

Journal of Information Systems

Volumn 24, Issue 1, 2010, Pages 91-112

  Kuhn Jr , John R ^a   Sutton, Steve G ^b  

^a UNIVERSITY OF LOUISVILLE   (United States)

^b UNIVERSITY OF CENTRAL FLORIDA   (United States)

Author keywords

Continuous assurance; Continuous auditing; Continuous monitoring; Embedded audit modules; Enterprise resource planning (ERP) systems; Enterprise risk management; Enterprise systems; Management control layer

Indexed keywords

EID: 78649478813     PISSN: 08887985     EISSN: 15587959     Source Type: Journal    
DOI: 10.2308/jis.2010.24.1.91     Document Type: Article

References (44)

1. Alles, M., A. Kogan, and M. A. Vasarhelyi. 2002. Feasibility and economics of continuous assurance. Auditing: A Journal of Practice & Theory 21 1:125-138.
2. Alles, M., A, G. Brennan, A. Kogan, and M. A. Vasarhelyi. 2006. Continuous monitoring of business process controls: A pilot implementation of a continuous auditing system at Siemens. International Journal of Accounting Information Systems 7 2:137-161.
3. Alles, M., A, A. Kogan, and M. A. Vasarhelyi. 2008. Putting continuous auditing theory into practice: Lessons from two pilot implementations. Journal of Information Systems 22 2:195-214.
4. AMR Research, Inc. AMR. 2008. Enterprise performance management: 2008 landscape series. Available at: http://www.approva.net/assets/resources/AMR_Research_REPORT_21828-The_Governance_Risk_Management_and_Com.pdf.
5. Behn, B. K., D. L. Searcy, and J. B. Woodroof. 2006. A within firm analysis of current and expected future audit lag determinants. Journal of Information Systems 20 1:65-86.
6. Braun, R. L., and H. E. Davis. 2003. Computer-assisted audit tools and techniques: analysis and perspectives. Managerial Auditing Journal 18 9:725-731.
7. Canadian Institute of Chartered Accountants and American Institute of Certified Public Accountants CICA/ AICPA. 1999. Continuous Auditing. Research Report. Toronto, Canada: CICA.
8. Chatterjee, D., R. Grewal, and V. Sambamurthy. 2002. Shaping up for e-commerce: Institutional enablers of the organizational assimilation of web technologies. Management Information Systems Quarterly 26 2:65-89.
9. Chen, H. H., S. H. Li, S. M. Huang, and Y. C. Hung. 2007. The development and performance evaluation of a continuous auditing assistance system. International Journal of Electronic Finance 1 4:460-472.
10. Daigle, R. J., and J. C. Lampe. 2004. The impact of the risk of consequence on the relative demand for continuous online assurance. International Journal of Accounting Information Systems 5 3:313-340.
11. Daigle, R. J., and J. C. Lampe. 2005. The level of assurance precision and associated cost demanded when providing continuous online assurance in an environment open to assurance competition. International Journal of Accounting Information Systems 6 2:129-156.
12. Debreceny, R. S., G. L. Gray, W. L. Tham, K. Y. Goh, and P. L. Tang. 2003. The development of embedded audit modules to support continuous monitoring in the electronic commerce environment. International Journal of Auditing 7 2:169-185.
13. Debreceny, R. S., G. L. Gray, W. L. Tham, K. Y. Goh, and P. L. Tang, J. Jun-Jin Ng, K. Siow-Ping Lee, and W. Yau. 2005. Embedded audit modules in enterprise resource planning systems: Implementation and functionality. Journal of Information Systems 19 2:7-27.
14. Deloitte. 2007. Security user segregation of duties-SAP GRC. Available at: e-linkurlhttp://www.Deloitte.com/dtt/case-study/url/e-link.
15. Dowling, C. 2009. Appropriate audit support system use: The influence of auditor, audit team and audit firm factors. The Accounting Review.
16. Ernst & Young. 2006. SEC and PCAOB roundtable discussion on implementation of internal control reporting provisions: Year Two. Emerging Trends in Internal Controls May: 1-12.
17. Fogarty, J. 2005. Continuous Auditing: Can it Become a Reality and What is its Impact on Auditing Standards Rutgers Tenth Continuous Auditing and Reporting Symposia. Newark, November
18. Gerhardt, K. W. 2002. The Emerging Role of the Information Systems Function in Modern Organizations: Technical and Managerial Challenges. The Peter Kiewitt Institute IST&E Research Round Table, Center for Management of Information Technology. Omaha, NE, October 25.
19. Greenbaum, J. 2008. SAP's business ByDesign: Explaining the delays. Available at: http://blogs.zdnet.com/Greenbaum/p165
20. Groomer, S. M., and U. S. Murthy. 1989. Continuous auditing of database applications: An embedded audit module approach. Journal of Information Systems 3 2:53-69.
21. Groomer, S. M., and U. S. Murthy. 2003. Monitoring high volume on-line transaction processing systems using a continuous sampling approach. International Journal of Auditing 7: 3-19.
22. Henrickson, R. 2009. Practitioner Discussion of Principles and Problems of Audit Automation as a Precursor for Continuous Auditing. University of Waterloo Centre for Information Integrity and Information Systems Assurance 6th Bi-Annual Research Symposium. Toronto, October.
23. Hunton, J. E., E. G. Mauldin and P. R. Wheeler. 2008. Potential functional and dysfunctional effects of continuous monitoring. The Accounting Review 83 6:1551-1569.
24. Jans, M., N. Lybaert, and K. Vanhoof. 2010. Internal fraud risk reduction: Results of a data mining case study. International Journal of Accounting Information Systems.
25. Kogan, A., E. F. Sudit, and M. A. Vasarhelyi. 1999. Continuous online auditing: A program of research. Journal of Information Systems 13 2:87-103.
26. Kuhn, J. R., and S. G. Sutton. 2006. Learning from WorldCom: Implications for fraud detection through continuous assurance. Journal of Emerging Technologies in Accounting 3: 61-80
27. Liang, H., N. Saraf, Q. Hu, and Y. Xue. 2007. Assimilation of enterprise systems: The effect of institutional pressures and the mediating role of top management. Management Information Systems Quarterly 31 4:59-88.
28. Loh, S., and R. Jamieson. 2008. Continuous Assurance of EBusiness Transactions for Fraud Detection. Sydney, Australia: University of New South Wales
29. Martens, C. 2006. SAP to buy compliance software firm Virsa. InfoWorld April 03.
30. McCarthy, W. E., G. Gal, and G. Geerts. 2005. Semantic Specification and Automated Enforcement of Internal Control Procedures within Accounting Systems. 10th World Continuous Auditing Conference, November
31. Murthy, U. S. 2004. An analysis of the effects of continuous monitoring controls on e-commerce system performance. Journal of Information Systems 18 2:29-47.
32. Perols, J. L., and U. S. Murthy. 2009. Information fusion in continuous assurance. University of Waterloo Centre for Information Integrity and Information Systems Assurance 6th Bi-Annual Research Symposium, Toronto, October.
33. Reckers, P., S. Whitecotton, and J. Lowe. 2002. The effects of decision aid use and reliability on juror's evaluations of auditor liability. The Accounting Review: 77 1 185-202.
34. Rutgers Business School. 2005. Tenth continuous auditing and reporting symposia agenda. Available at: http://raw.rutgers.edu/10th/10thWCASAgendaV21nov12005URL.htm. University of Rutgers Newark, November.
35. SAP. 2007. SAP Compliance Calibrator by Virsa Systems. Available at: http://www.SAP.com.
36. SAP. 2008. Stop security violations before they occur. Available at: http://www.sap.com/usa/solutions/business-suite/erp/financials/pdf/BWP_Stop_Security_Violations.pdf.
37. Sutton, S. G. 2006. Implications of the U.S. Sarbanes-Oxley Act for Enterprise Systems Selection, Switching Costs, and Future Design. Proceedings of the Third International Conference on Enterprise Systems and Accounting, Santorini, Greece
38. Sutton, S. G., R. Young, and P. McKenzie. 1995. An analysis of potential legal liability incurred through audit expert systems. International Journal of Intelligent Systems in Accounting Finance & Management 4 3: 191-204.
39. Taylor, A. 2008. Preview of SAP business ByDesign. Available at: http://www.ondemandbeat.com/2008/02/27/preview-of-sap-business-bydesign/.
40. Vasarhelyi, M. A. 2006. Concepts in continuous assurance. Working paper, Rutgers University.
41. Vasarhelyi, M. A., M. Alles, and A. Kogan. 2004. Principles of analytic monitoring for continuous assurance. Journal of Emerging Technologies in Accounting 1: 1-21
42. Vasarhelyi, M. A., M. Alles, and A. Kogan, and F. B. Halper. 1991. The continuous audit of online systems. Auditing: A Journal of Practice & Theory 10 1:110-125.
43. VMware. 2009. Best practice guidelines for SAP solutions on VMware infrastructure. Available at: http://www.vmware.com/files/pdf/whitepaper_SAP_bestpractice_jan08.pdf.
44. Woodroof, J., and D. Searcy. 2001. Continuous audit: Model development and implementation within a debt covenant compliance domain. International Journal of Accounting Information Systems 2 3: 169-191