IS Audit Report-

profilepato123
is_audit_report.docx
Home>Information Systems homework help>IS Audit Report-

INFORMATION SYSTEMS AUDIT AND ASSURANCE Department of Accounting and Corporate Governance

( 1 )

IS Audit Report

Task

Perform a web search on recent (in the past 3 years) articles to find an interesting case study, such as news articles in relation to IS risks.

You will need to attach the original version of the case study or provide the URL link to the original case in the appendix when you submit the assignment.

Assuming that you are an IS auditor, prepare an IS audit plan and report to the management of your client. The document must include the followings:

1) Executive Summary

You will need to prepare an executive summary document (0.5 page maximum) to the board of directors.

2) Background to the Case

Background to the client’s business and computerised environment. - This is to demonstrate your understanding of the client’s business and IS environment.

3) IS Risks

Identify IS risks from the case study, including analysing the likelihood, level of risks and implications to the business.

4) Audit Plan, Objectives and Procedures

Prepare an audit plan outlining the areas that you propose to audit. In addition, you will need to include audit objectives and audit procedures for each of the area(s) that you plan to audit.

5) Audit Questions and Documents

For each of the audit objectives, provide at least three examples of interview questions that you will use to gather evidence from clients, including naming relevant documents that you may want to obtain for the audit.

6) Control Recommendations

Provide a set of recommendations of control mechanism(s) to mitigate for each of the IS risks. Identify the benefits of your recommendation to your client.

Required

 Format requirements: “Times New Roman” size 12 with 1.5 line spacing, approximately 1500

– 2000 words in total (not including references). You must include the total of words used in your report. The report should have appropriate headings and subheadings (including an introduction and conclusion).

 You must acknowledge the use of the work of others (e.g. the academic journal articles on which your report is based) using the Harvard referencing style (see http://www.lib.mq.edu.au/research/referencing.html). Any ideas or quotations must be correctly cited in the body of your report and a reference list must be provided at the end of your report.

 Review the marking rubric so that you understand the expected standards and how you will receive feedback.

Submission

 Students will need to upload their assignment to http://ilearn.mq.edu.au (Turn-it-in) by

11:59 pm of Wednesday 6th May (week 8). Otherwise your assignment will be considered late.

 Late assignment will also be submitted via Turn-it-in.

Marking Criteria

The following criteria are how IS audit report will be marked.

Not

attempted

Fail

Pass

Credit

Distinction

High Distinction

1) Selection of

the case study and risk analysis (30%)

No attempt.

or

The answer

is copied or

substantially copied from materials or other sources.

Poor selection of

the case study. Report indicates poor or no understanding of the case study and its

associated risks.

Good selection

of the case study. Report indicates some understanding of the case study and its associated risks.

Good selection of

the case study. Report indicates good understanding of the case study and its

associated risks

Good selection of

the case study. Report indicates high level of understanding of the case study and its associated risks.

Good selection of

the case study. Report indicates in‐depth understanding of the case study and comprehensive risk analysis.

2) Critical analysis of the case, quality of

audit plan and recommendati on to target

audience. (50%)

No attempt.

or

The answer

is copied or substantially copied from materials or other sources.

Report indicates poor or no understanding of

audit plan and in appropriate recommendation

to target

audience.

Report indicates some understanding

of audit plan and able to provide

appropriate recommendati on to target

audience.

Report indicates good understanding of

audit plan and able to provide appropriate

recommendation to target audience.

Report indicates high level understanding of

audit plan and able to provide appropriate

recommendation

to target audience.

Report indicates advanced understanding of

audit plan and able to provide appropriate

recommendation.

to target audience

3) Structure of

the text (10%)

No attempt,

or

The answer

is copied or

substantially copied from materials or other

sources

Report does not follow the structure given and information

is not generally clearly organised within each

section.

Report mostly follows the structure given and

information is generally clearly

organised within each section.

Report follows the structure given and information is

generally clearly organised within each section.

Report follows the structure given and information in each section is

organised in a clear

and logical way.

Report follows the structure given and information in each section is

presented in a clear logical way that supports the

overall point/argument of that section.

4) Professional

presentation

including formatting, spelling, grammar, referencing (10%)

No attempt,

or

The answer is copied or substantially copied from materials or other

sources

Presentation is of

a very poor

standard, with numerous errors/ inconsistencies.

Presentation is

of a basic

standard, with some formatting, spelling, grammar, referencing errors/inconsi stencies

Presentation is of

a good standard,

with infrequent formatting, spelling, grammar, referencing errors/inconsiste ncies.

Presentation is of a

good standard,

with little or no formatting, spelling, grammar, referencing errors/inconsisten cies.

Presentation is of a

professional

standard, with little or no formatting, spelling, grammar, referencing errors/inconsisten cies.