Auditing in enterprise system environment: A synthesis

Journal of Enterprise Information Management

Volumn 24, Issue 6, 2011, Pages 494-519

  Kanellou, Alexandra ^a   Spathis, Charalambos ^a  

^a ARISTOTLE UNIVERSITY OF THESSALONIKI   (Greece)

Author keywords

Continuous auditing; ERP; ES; External auditing; Internal auditing; Internal external auditing; Internal external control; IS (IT) Audit; IS (IT) auditors financial auditors

Indexed keywords

EID: 80055026985     PISSN: 17410398     EISSN: None     Source Type: Journal    
DOI: 10.1108/17410391111166549     Document Type: Review

References (46)

1. Ajzen, I. (1991), "The theory of planned behavior" in Organizational Behavior and Human Decision Processes, Vol. 50, No. 2, pp. 179-211.
2. Alles, M.G., Kogan, A. and Vasarhelyi, M.A. (2008), "Putting continuous auditing theory into practice: lessons from two pilot implementations" in Journal of Information Systems, Vol. 22, No. 2, pp. 195-214.
3. Alles, M.G., Brennan, G., Kogan, A. and Vasarhelyi, M.A. (2006), "Continuous monitoring of business process controls: a pilot implementation of a continuous auditing system at Siemens" in International Journal of Accounting Information Systems, Vol. 7, pp. 137-61.
4. American Institute of Certified Public Accountants (AICPA) (2001), Statement on Auditing Standards No. 94: The Effect of Information Technology on the Auditor's Consideration of Internal Control in a Financial Statement Audit, AICPA, New York, NY.
5. Bae, B. and Ashcroft, P. (2004), "Implementation of ERP systems: accounting and auditing implications" in Information Systems Control Journal, Vol. 5, pp. 43-8.
6. Best, P. (2000), "Auditing SAP R/3 - control risk assessment" in Australian Accounting Review, Vol. 10, No. 3, pp. 31-42.
7. Best, P., Rikhardsson, P. and Toleman, M. (2009), "Continuous fraud detection in enterprise systems through audit trail analysis" in Journal of Digital Forensics, Security and Law, Vol. 4, No. 1, pp. 39-60.
8. Brazel, J.F. (2005), "A measure of perceived auditor ERP systems expertise. Development, assessment and uses" in Managerial Auditing Journal, Vol. 20, No. 6, pp. 619-31.
9. Brazel, J.F. and Agoglia, C.P. (2007), "An examination of auditor planning judgements in a complex accounting information system environment" in Contemporary Accounting Research, Vol. 24, No. 4, pp. 1059-83.
10. Brown, W. and Nasuti, F. (2005), "What ERP systems can tell us about Sarbanes-Oxley" in Information Management and Computer Security, Vol. 13, No. 4, pp. 311-27.
11. Burnaby, P. and Hass, S. (2009), "A summary of the global Common Body of Knowledge 2006 (CBOK) study in internal auditing" in Managerial Auditing Journal, Vol. 24, No. 9, pp. 813-34.
12. Cerullo, M.V. and Cerullo, M.J. (2003), "Impact of SAS 94 on computer audit techniques", Information Systems Control Journal, Vol. 1, available at: www.isaca.org.
13. Chang, S.I., Wu, C.C. and Chang, I.C. (2008), "The development of a computer auditing system sufficient for Sarbanes-Oxley Section 404 - a study on the purchasing and expenditure cycle of the ERP system" in Information Systems Management, Vol. 25, pp. 211-29.
14. Chen, J.R. (2009), "An exploratory study of alignment ERP implementation and organizational development activities in a newly established firm" in Journal of Enterprise Information Management, Vol. 22, No. 3, pp. 298-316.
15. Coppers, C. and Lybrand, L.L.P. (2002), Security, Audit and Control Features SAP R/3: A Technical and Risk Management Reference Guide, IT Governance Institute, Rolling Meadows, IL.
16. Curtis, M.B., Jenkins, J.G., Bedard, J.C. and Donald, R.D. (2009), "Auditors' training and proficiency in information systems: a research synthesis" in Journal of Information Systems, Vol. 23, No. 1, pp. 79-96.
17. Debreceny, R.S., Gray, G.L., Ng, J.J.J., Lee, K.S.P. and Yau, W.F. (2005), "Embedded audit modules in enterprise resource planning systems: implementation and functionality" in Journal of Information Systems, Vol. 19, No. 2, pp. 7-27.
18. Eilifsen, A., Knechel, W.R. and Wallage, P. (2001), "Application of the business risk audit model: a field study" in Accounting Horizons, Vol. 15, pp. 193-207.
19. Gallegos, F. (2005), "Audit concerns: looking at ERP application integration and implementation issues", Informations Systems Audit and Control Association, Vol. 4, available at: www.isaca.org.
20. Goldberg, S. and Godwin, J.H. (2003), "Operational reviews and auditing ERP" in The Journal of Corporate Accounting and Finance, Vol. 14, No. 4, pp. 63-5.
21. Grabski, S.V. and Leech, S.A. (2007), "Complementary controls and ERP implementation success" in International Journal of Accounting Information Systems, Vol. 8, pp. 17-39.
22. Grabski, S.V., Leech, S.A. and Lu, B. (2001), "Risks and controls in the implementation of ERP systems" in The International Journal of Digital Accounting Research, Vol. 1, No. 1, pp. 47-68.
23. Huang, S.M., Hsieh, P.G., Tsao, H.H. and Hsu, P.Y. (2008), "A structural study of internal control for ERP system environments: a perspective from Sarbanes-Oxley Act" in International Journal of Management and Enterprise Development, Vol. 5, No. 1, pp. 102-21.
24. Huang, S.M., Yen, D.C., Hung, Y.C., Zhou, Y.J. and Hua, J.S. (2009), "A business process gap detecting mechanism between information system process flow and internal control flow" in Decision Support Systems, Vol. 47, pp. 436-54.
25. Hunton, J.E., Mauldin, E.G. and Wheeler, P.R. (2008), "Potential functional and dysfunctional affects of continuous monitoring" in The Accounting Review, Vol. 83, No. 6, pp. 1551-69.
26. Hunton, J.E., Wright, A.M. and Wright, S. (2004), "Are financial auditors overconfident in their ability to assess risks associated with enterprise resource planning systems?" in Journal of Information Systems, Vol. 18, No. 2, pp. 7-28.
27. Kuhn, J.R. and Sutton, S.G. (2006), "Learning from WorldCom: implications for fraud detection through continuous assurance" in Journal of Emerging Technologies in Accounting, Vol. 3, pp. 61-80.
28. Kuhn, J.R. and Sutton, S.G. (2010), "Continuous auditing in ERP system environments: the current state and future directions" in Journal of Information Systems, Vol. 24, No. 1, pp. 91-112.
29. Kumar, K. and Hillegersberg, J.V. (2000), "Enterprise resource planning experiences and evolution" in Commun ACM, Vol. 43, No. 3, pp. 22-6.
30. Lee, G.H. (2008), "Rule-based and case-based reasoning approach for internal audit of bank" in Knowledge-Based Systems, Vol. 21, pp. 140-7.
31. Madani, H.H. (2009), "The role of internal auditors in ERP-based organizations" in Journal of Accounting and Organizational Change, Vol. 5, No. 4, pp. 514-26.
32. Maurizio, A., Girolami, L. and Jones, P. (2007), "EAI and SOA: factors and methods influencing the integration of multiple ERP systems (in an SAP environment) to comply with the Sarbanes-Oxley Act" in Journal of Enterprise Information Management, Vol. 20, No. 1, pp. 14-31.
33. Messier, W.F., Eilifsen, A. and Austen, L.A. (2004), "Auditor detected misstatements and the effect of information technology" in International Journal of Auditing, Vol. 8, pp. 223-35.
34. Munter, P. (2002), "Will technology defeat your auditor?" in The Journal of Corporate Accounting and Finance, Vol. 13, No. 4, pp. 17-22.
35. Public Oversight Board (POB) (2000), Panel on Audit Effectiveness: Report and Recommendations, AICPA, Stamford, CT.
36. Rezaee, Z. and Reinstein, A. (1998), "The impact of emerging information technology on auditing" in Managerial Auditing Journal, Vol. 13, No. 8, pp. 465-71.
37. Spathis, C. (2006), "Enterprise systems implementation and accounting benefits" in Journal of Enterprise Information Management, Vol. 19, No. 1, pp. 67-82.
38. Spathis, C. and Constantinides, S. (2004), "Enterprise resource planning systems' impact on accounting processes" in Business Process Management Journal, Vol. 10, No. 3, pp. 234-47.
39. Sutton, S.G. (2000), "The changing face of accounting in an information technology dominated world" in International Journal of Accounting Information Systems, Vol. 1, pp. 1-8.
40. Sutton, S.G. (2006), "Enterprise systems and the re-shaping of accounting systems: a call of research" in International Journal of Accounting Information Systems, Vol. 7, pp. 1-6.
41. Vasarhelyi, M., Alles, M. and Kogan, A. (2004), "Principles of analytic monitoring for continuous assurance" in Journal of Emerging Technologies in Accounting, Vol. 1, pp. 1-21.
42. Vendrzyk, V.P. and Bagranoff, N.A. (2003), "The evolving role of IS audit: a field study comparing the perceptions of IS and financial auditors" in Advances in Accounting, Vol. 20, pp. 141-63.
43. Winograd, B.N., Gerson, J.S. and Berlin, B.L. (2000), "Audit practices of PricewaterhouseCoopers" in Auditing: A Journal of Practice and Theory, Vol. 19, pp. 175-82.
44. Wright, S. and Wright, A.M. (2002), "Information system assurance for enterprise resource planning systems: unique risk considerations" in Journal of Information Systems, Vol. 16, pp. 99-113.
45. Yang, D.C. and Guan, L. (2004), "The evolution of IT auditing and internal control standards in financial statement audits. The case of the United States" in Managerial Auditing Journal, Vol. 19, No. 4, pp. 544-55.
46. Yen, C.C., Huang, S.M., Li, C.L. and Hsiah, Y.C. (2006), "Application, influence and impact of Sarbanes-Oxley Act" in Computer Auditing Journal, Vol. 15, pp. 1-11.