Do Auditors Need to Have in-Depth Knowledge of Information Technology?

Do auditors need to have in-depth knowledge of information technology? Yes, auditors need to have in-depth knowledge of information technology. Networks and computers deliver the most information needed for auditing to work. For it to be effective, auditors have to use the computer as an auditing tool, audit automated systems and data, and understand the business purposes for the systems and the situation in which the systems operate. The other important uses for networks and computers by auditors are in audit administration. By pursuing new uses for computers and communications, auditors can direct their activities more effectively and improve their skill to review systems information. Automated tools give auditors the chance to increase individual productivity and audit function. The development of auditing in the fast growth of technology, which directly contributes to information technology auditing, internal control standards and guidelines explained by Yang (2004). Technology, electronic data processing, and information system have altered the way organizations handle its business, endorsing operational efficiency and assist decision-making. American Institute of Certified Public Accountants (AICPA) and the Information Systems Audit and Control Association (ISACA), have provided standards to allow and deliver required guidance to auditors. In SAS No. 48, "the effects of computer processing on the examination of financial statements," explained and suggested auditors to consider the methods of computer data processing and other important factors such as planning and supervision, study and assessment of internal control, evidential matter, systematic review procedures, and requirements of the audit team. It also underlined the individual characteristics of information technology systems that should be measured by the auditor when directing the assessment process. In SAS No. 94 recognized the types of systems, controls and evidence auditors faced. The author

References: 1. Coderee DG (1993). Automating the audit function http://www.findarticles.com/p/articles/aut0_audit 2. Ruud, F. (2001) Corporate Governance und Interne Revision. https://na.theiia.org/iiarf/Public%20Documents/Chapter%203%20The%20Internal%20Audit%20Function%20An%20Integral%20Part%20of%20Organizational%20Governance.pdf 3. Staciokas R. and Rupsys R. (2005) Internal Audit and its Role in Organizational Government. http://www.ktu.lt/en/science/journals/econo/infaut038.html The Need for Continuous Controls Monitoring. http://www.metagroup.com/webhost/ONLINE/739743/d2951.htm 4. Tucker, GH (2001) IT and the Audit. http://www.aicpa.org/pubs/jofa/sept2001/tucker.htm Virtual Office Risk Manage. Security, Control, and Auditing. http://www.theiia.org/itaudit/index.cfm?fuseaction=forum&fid=644 5. Yang, David C. and Guan, Liming (2004). The evolution of IT auditing and internal control standards in finan. statement audits: The case of the United States. http://emeraldsight.com/0268-6902.htm