information systems control and audit ~ lecture # 2

15
G Y A A N A C A D E M Y Information Systems Control and Audit – Lecture # 2 CA Vikram S. Mathur BA (Eco) Hons, FCA, DISA (ICAI) Cell: +91-9998090111 Email: [email protected] Website: http://www.vsmathur.co.in

Upload: fca-vikram-s-mathur

Post on 16-Jan-2017

182 views

Category:

Economy & Finance


0 download

TRANSCRIPT

Page 1: Information systems control and audit ~ Lecture # 2

GYAAN

ACADEMY

Information Systems Control and Audit – Lecture # 2

CA Vikram S. MathurBA (Eco) Hons, FCA, DISA (ICAI)

Cell: +91-9998090111Email: [email protected]

Website: http://www.vsmathur.co.in

Page 2: Information systems control and audit ~ Lecture # 2

GYAAN

ACADEMY ISCA Lectures (Number 2) CA Vikram S. Mathur (+91-9998090111)

([email protected])2

System Development Lifecycle Methodology

• Systems development refers to process of examining a business situation with the intent of improving it through better procedures and methods.

• Two major components:– System Analysis: process of gathering and interpreting

facts, diagnosing problems – recommend improvements to the system.

– System Design: process of planning a new business system to replace or complement an existing system.

Page 3: Information systems control and audit ~ Lecture # 2

GYAAN

ACADEMY ISCA Lectures (Number 2) CA Vikram S. Mathur (+91-9998090111)

([email protected])3

Achieving System Development Objectives

• Many reasons why organizations fail to achieve their system development objectives:Lack of senior management supportShifting user needsDevelopment of strategic systemsNew technologiesLack of standard project management and system

development methodologiesOverworked or under-trained development staff.Resistance to change.Lack of user participation Inadequate testing and user training

Page 4: Information systems control and audit ~ Lecture # 2

GYAAN

ACADEMY ISCA Lectures (Number 2) CA Vikram S. Mathur (+91-9998090111)

([email protected])4

Systems Development Team• Consists of several people who are key

Information Service Users – top level steering committee.

• Ensure that ongoing system development consistently aimed at satisfying information requirements of managers and users.

• System designers play a lead role during design, development & implementation stages.

• End users are ultimately responsible, where they are involved in development.

Page 5: Information systems control and audit ~ Lecture # 2

GYAAN

ACADEMY ISCA Lectures (Number 2) CA Vikram S. Mathur (+91-9998090111)

([email protected])5

Accountant’s Role in Development

• Most accountants – uniquely qualified – combine knowledge of IT, business accounting and internal control as well as behavior and communications – ensure new systems meets needs of user and possess adequate internal control.

• Knowledge of accounting and auditing, for e.g. to perform cost benefit analysis of systems.

Page 6: Information systems control and audit ~ Lecture # 2

GYAAN

ACADEMY ISCA Lectures (Number 2) CA Vikram S. Mathur (+91-9998090111)

([email protected])6

Systems Development Methodology

• Formalized, standardized, documented set of activities used to manage a system development project.

• Characterized by:Division into identifiable processes, each having start and

end point.Deliverables (reports) produced periodically.Testing thoroughly before release to meet users needs.Training plan development.Formal program change controls to preclude unauthorized

changes.Post-implementation review has to be performed.

Page 7: Information systems control and audit ~ Lecture # 2

GYAAN

ACADEMY ISCA Lectures (Number 2) CA Vikram S. Mathur (+91-9998090111)

([email protected])7

SDLC Cycle

Page 8: Information systems control and audit ~ Lecture # 2

GYAAN

ACADEMY ISCA Lectures (Number 2) CA Vikram S. Mathur (+91-9998090111)

([email protected])8

Approaches to System Development

• Waterfall approach• Prototyping approach• Incremental approach• Spiral approach• Rapid Application Development (RAD)

approach• Agile Methodologies

8

Page 9: Information systems control and audit ~ Lecture # 2

GYAAN

ACADEMY ISCA Lectures (Number 2) CA Vikram S. Mathur (+91-9998090111)

([email protected])9

Waterfall Approach

Page 10: Information systems control and audit ~ Lecture # 2

GYAAN

ACADEMY ISCA Lectures (Number 2) CA Vikram S. Mathur (+91-9998090111)

([email protected])10

Prototyping Approach

Page 11: Information systems control and audit ~ Lecture # 2

GYAAN

ACADEMY ISCA Lectures (Number 2) CA Vikram S. Mathur (+91-9998090111)

([email protected])11

Incremental Approach

Page 12: Information systems control and audit ~ Lecture # 2

GYAAN

ACADEMY ISCA Lectures (Number 2) CA Vikram S. Mathur (+91-9998090111)

([email protected])12

Spiral Approach

Page 13: Information systems control and audit ~ Lecture # 2

GYAAN

ACADEMY ISCA Lectures (Number 2) CA Vikram S. Mathur (+91-9998090111)

([email protected])13

Rapid Action Development Approach

Page 14: Information systems control and audit ~ Lecture # 2

GYAAN

ACADEMY ISCA Lectures (Number 2) CA Vikram S. Mathur (+91-9998090111)

([email protected])14

Agile Methodologies

Page 15: Information systems control and audit ~ Lecture # 2

GYAAN

ACADEMY

Phases of SDLC

ISCA Lectures (Number 2) CA Vikram S. Mathur (+91-9998090111) ([email protected])

15