Wu and Hahn's control-complexity/control-point orientation for computer information system (CIS) audits: An empirical test in an electronic data interchange (EDI) environment

Managerial Auditing Journal

Volumn 14, Issue 7, 1999, Pages 339-350

  Hardy, Catherine ^a   Reeve, Robert ^b  

^a CHARLES STURT UNIVERSITY   (Australia)

^b MACQUARIE UNIVERSITY   (Australia)

Author keywords

Computer networks; Computer systems; Control systems; Electronic data interchange

Indexed keywords

EID: 84986105964     PISSN: 02686902     EISSN: None     Source Type: Journal    
DOI: 10.1108/02686909910289821     Document Type: Review

References (65)

1. Aggarwal, R. and Rezaee, Z. (1996), “EDI risk assessment”, The Internal Auditor, Vol. 53 No. 1, pp. 40-4.
2. Australian Auditing Standard (AUS) 214 (1997), “Auditing in a CIS environment”, in Australian Society of CPAs and The Institute of Chartered Accountants in Australia, Auditing Handbook, Australian Auditing Standards Board, Australian Accounting Research Foundation, Prentice-Hall, Englewood Cliffs, NJ.
3. Australian Society of CPAs (1994), EDI – A Business Perspective, Information Technology Centre of Excellence.
4. Bonner, S.E. and Pennington, N. (1991), “Cognitive processes and knowledge as determinants of auditor expertise”, Journal of Accounting Literature, Vol. 10, pp. 1-50.
5. Bradley, R. and Garsombke, E. (1993), “Electronic data interchange: controlling the risk”, Internal Auditing, Spring, pp. 53-8.
6. Burns, D.C. and Sorton, H.L. (1991) “EDI security and controls”, Bank Management, Vol. 67 No. 2, pp. 27-31.
7. Cash, J.I., Bailey, A.D. and Whinston, A.B. (1977), “A survey of techniques for auditing EDP-based accounting information systems”, The Accounting Review, Vol. LII No. 4, pp. 813-32.
8. Chan, S. (1992), “Establishing reliability in an EDI environment”, The EDP Auditor Journal, Vol. II, pp. 47-51.
9. Chan, S., Govindan, M., Picard, J.Y. and Leschiutta, E. (1993), EDI for Managers and Auditors, 2nd ed., The Canadian Institute of Chartered Accountants, Canada.
10. Colbert, J.L. (1989), “The effect of experience on auditors’ judgements”, Journal of Accounting Literature, Vol. 8, pp. 137-49.
11. Coopers & Lybrand (1994), EDI Survey – 1994 Analysis of Responses, Coopers & Lybrand Consultants.
12. Cronbach, L.J. (1951), “Construct validity in psychological tests”, Psychological Bulletin, Vol 52, pp. 281-302.
13. Cullen, S. (1995), “Electronic data interchange: implementation and control issues”, Perspective on Contemporary Auditing, ASCPA Audit Centre of Excellence, pp. 58-66.
14. Davis, G.B. and Weber, R. (1983), Auditing Advanced EDP Systems: A Survey of Practice and Development of a Theory, Limperg Institute, The Netherlands.
15. Davis, G.B. and Weber, R. (1986), “The impact of advanced computer systems on controls and audit procedures: a theory and an empirical test”, Auditing: A Journal of Practice & Theory, Vol. 5 No. 2, pp. 35-49.
16. de Vaus, D.A. (1991), Surveys in Social Research, 3rd ed., Allen and Unwin, London.
17. Emory, C.W. and Cooper, D.R. (1991), Business Research Methods, 4th ed., Irwin, Boston, MA.
18. Gill, G.S. and Cosserat, G.W. (1993), Modern Auditing in Australia, 3rd ed., John Wiley & Sons, Brisbane.
19. Godsell, D. (1994), Auditors’ Legal Duties and Liabilities in Australia, Longman Professional, Melbourne.
20. Gul, F.A., Teoh, H.Y., Andrew, B.H. and Schelluch (1994), Theory and Practice of Australian Auditing, 3rd ed., Thomas Nelson, Australia.
21. Harper, R.M. Jr (1988), “AHP judgement models of EDP auditors’ evaluation of internal control for local area networks”, Journal of Information Systems, Fall, pp. 67-85.
22. Jamieson, R. (1994), EDI: An Audit Approach, Monograph Series 7, The EDP Auditors Foundation, USA.
23. Judd, C.M., Smith, E.R. and Kidder, L.H. (1991), Research Methods in Social Relations, 6th ed., International edition, Harcourt Brace Jovanovich, FL.
24. Kimberley, P. (1991), Electronic Data Interchange, McGraw-Hill, New York, NY.
25. Landry, R. Jr, Letzkus, W.C. and Cronan, T. (1989), “An examination of consensus between external and internal auditors”, The EDP Auditor Journal, Vol. IV, pp. 53-63.
26. Libby, R. and Tan, H. (1994), “Modelling the determinants of audit expertise”, Accounting, Organisations & Society, Vol. 19 No. 8, pp. 701-16.
27. Neu, D. (1992), “The social construction of positive choices”, Accounting, Organisations and Society, Vol. 17 No. 3/4, pp. 223-37.
28. Norris, D. and Waples, E. (1989), “Control of electronic data interchange systems”, Journal of Systems Management, March, pp. 21-5.
29. Nunnally, J.C. (1967), Psychometric Theory, McGraw-Hill, New York, NY.
30. Oppenheim, A.N. (1966), Questionnaire Design and Attitude Measurement, Heinemann, London.
31. Parfett, M. (1992), What Is EDI? A Guide to Electronic Data Interchange, 2nd ed., NCC Blackwell, Oxford.
32. Pearson, M. (1996), “Auditing in a paperless environment”, Ohio CPA Journal, Vol. 55 No. 3, pp. 31-2.
33. Pirie, D. and Sheehy, D. (1996), “Electronic commerce”, CA Magazine, Vol. 129 No. 5, pp. 45-7.
34. Powers, W.J. and Carver, T. (1990), “EDI: control and audit issues”, The EDP Auditor Journal, Vol. 1, pp. 25-30.
35. Ratnasingham, P. (1998), “Internet-based EDI trust and security”, Information Manage- ment and Computer Security, Vol. 6 No. 1, pp. 33-9.
36. Sadhwani, A.T., Kim, I., and Helmerci, J. (1989), “EDI's effect on internal controls”, EDPACS, Vol XVII No. 1, pp. 1-10.
37. Schelluch, P. (1995), “Internal control – a new focus”, CPA Communique, p. 60.
38. Stein, D.M. and Rittenberg, L.E. (1995), “EDI systems: implications for audit evidence in re-engineering the audit process”, Internal Auditing, Winter, pp. 10-23.
39. Takac, F. (1990), “Electronic data interchange (EDI): what is it and how is it going to change the way we do business?”, The Australian Banker, August, pp. 141-6.
40. Thierauf, R.J. (1990), Electronic Data Interchange in Finance and Accounting, Quorum Books, New York, NY.
41. Tradegate ECA (formerly known as Electronic Commerce Australia) (1996), Electronic Commerce Newsletter, Vol. 5, August, pp. 1-8.
42. Wallace, R.S.O. and Cooke, T.E. (1990), “Nonresponse bias in mail accounting survey: a pedagogical extension”, British Accounting Review, Vol, 22, pp. 283-8.
43. Wallace, R.S.O. and Mellor, C.J. (1988), “Nonresponse bias in mail accounting surveys: a pedagogical note”, British Accounting Review, Vol. 20, pp. 131-9.
44. Wand, Y. and Weber, R. (1989), “A model of control and audit procedure change in evolving data processing systems”, The Accounting Review, Vol. LXIV No. 1, pp. 87-107.
45. Weber, R. (1980), “Some characteristics of the free recall of computer controls by EDP auditors”, Journal of Accounting Research, Vol. 18 No. 1, pp. 214-41.
46. Weber, R. (1988), EDP Auditing, Conceptual Foundations and Practice, 2nd ed., McGraw-Hill, New York, NY.
47. Weiner, S. (1995), “Business risk, internal control and audit implications of EDI”, The CPA Journal, Vol. 65 No. 11, November, pp. 56-61.
48. Williams, D.J. and Lillis, A. (1985), “EDP audits of operating systems – an exploratory study of the determinants of the prior probabilities of risk”, Auditing: A Journal of Practice and Theory, Vol. 4 No. 2, pp. 110-17.
49. Wu, F.H. and Hahn, R.L. (1989), “A control-complexity and control-point orientation to the review of an entity's internal control structure in the computer environment”, Journal of Information Systems, Vol. 3 No. 2, pp. 117-31.
50. Wyber, J. (1992), “Attest audit reliance on computer controls”, Charter, August, pp. 58-60.
51. Adolphson, D.L. and Hansen, J.V. (1991), “Evaluating software controls for electronic data interchange”, European Journal of Operational Research, Vol. 51, pp. 42-6.
52. Australian Auditing Standard (AUS) 402 (1997), “Risk assessment and internal controls”, in Australian Society of CPAs and The Institute of Chartered Accountants in Australia, Auditing Handbook, Australian Auditing Standards Board, Australian Accounting Research Foundation, Prentice-Hall, Englewood Cliffs, NJ.
53. Australian Auditing Practice Statement (AUP) 4.1 (1995), “The effects of an EDP environment on the study of accounting systems and internal control”, in Australian Society of CPAs and The Institute of Chartered Accountants in Australia, Auditing Handbook, Australian Auditing Standards Board, Australian Accounting Research Foundation, Prentice-Hall, Englewood Cliffs, NJ.
54. Australian Society of CPAs and The Institute of Chartered Accountants in Australia (1994), A Research Study on Financial Reporting and Auditing – Bridging the Expectation Gap, Executive Summary.
55. Australian Society of CPAs and The Institute of Chartered Accountants in Australia (1996), Beyond the Gap: Report of the Financial Reporting and Audit Expectation Gap Taskforce to the Joint Standing Committee, June.
56. Carlin, A. (1990), “Audit concerns in electronic data interchange”, EDPACS Newsletter, Vol. XVII No. 7, pp. 1-7.
57. Gibbins, M. and Wolf, F.M. (1982), “Auditors’ subjective decision environment – the case of a normal external audit”, The Accounting Review, April, pp. 245-71.
58. Gibbs, J. and Sorkin, H.L. (1991), “Audit and control implications of the OSI seven-layer model in an EDI environment”, EDPACS, Vol. 10, October, pp. 8-14.
59. Gottliebsen, R. (1995), “EDI will come with a rush”, Business Review Weekly, January, Vol. 16, p. 6.
60. Hill, N. and Ferguson, D. (1997), “Electronic data interchange: a definition and perspective”, http://www.edigroup.com/journal/sample1.html
61. Intelligent Commercial and Research Information Systems (ICARIS) Project (1997). See Steel, K. (http://www.cs.mu.oz.au/research/icaris/icaris.html (27 February.)
62. Jamieson, R. (1995), “Electronic commerce – meeting the audit challenge”, IS Audit and Control Journal, Vol. II, pp. 10-17.
63. Kent, P. and Weber, R. (1994), Auditor Expertise, Judgment Accuracy and Judgment Confidence, Working Paper, Department of Commerce, The University of Queensland, June.
64. Machlup, F. and Mansfield, U. (1983), The Study of Information, Interdisciplinary Messages, John Wiley & Sons, Canada.
65. Murray, D. and Regel, R.W. (1992), “Accuracy and consensus in accounting studies of decision making”, Behavioral Research in Accounting, Vol. 4, pp. 126-39.