Content deleted Content added
Gamapamani (talk | contribs) m - extra tag |
|||
| (297 intermediate revisions by more than 100 users not shown) | |||
Line 1:
{{Short description|Data analysis software}}
{{Multiple issues|
{{Essay-like|article|date=August 2009}}
{{Cleanup rewrite|date=December 2023}}
}}
'''Computer-assisted audit tool''' (CAATs) or '''computer-assisted audit tools and techniques''' (CAATTs) is a growing field within the IT audit profession. CAATs is the practice of using computers to automate the IT audit processes. CAATs normally include using basic office [[productivity software]] such as [[spreadsheet|spreadsheets]], [[word processors]] and text editing programs and more advanced software packages involving use [[statistical analysis]] and [[business intelligence]] tools. But also more dedicated [[#Specialized software|specialized software]] are available (see below).
CAATs have become synonymous with [[data analytics]] in the audit process.
==Traditional auditing vs CAATs==
===Traditional audit example===
The traditional method of auditing allows auditors to build conclusions based upon a limited sample of a population, rather than an examination of all available or a large sample of data.
===CAATTs alternative===
CAATTs, not CAATs, addresses these problems. CAATTs, as it is commonly used, is the practice of analyzing large volumes of data looking for anomalies. A well-designed CAATTs audit will not be a sample, but rather a complete review of all transactions. Using CAATTs the auditor will extract every transaction the business unit performed during the period reviewed. The auditor will then test that data to determine if there are any problems in the data.
===Traditional audit vs CAATTs on specific risks===
Another advantage of CAATTs is that it allows auditors to test for specific risks. For example, an insurance company may want to ensure that it doesn't pay any claims after a policy is terminated. Using traditional audit techniques this risk would be very difficult to test. The auditor would "randomly select" a "statistically valid" sample of claims (usually if any of those claims were processed after a policy was terminated). Since the insurance company might process millions of claims the odds that any of those 30–50 "randomly selected" claims occurred after the policy was terminated is extremely unlikely.
Using CAATTs the auditor can select every claim that had a date of service after the policy termination date. The auditor then can determine if any claims were inappropriately paid. If they were, the auditor can then figure out why the controls to prevent this failure. In a real-life audit, the CAATTs auditor noted that several claims had been paid after policies were terminated. Using CAATTs the auditor was able to identify every claim that was paid and the exact dollar amount incorrectly paid by the insurance company. Furthermore, the auditor was able to identify the reason why these claims were paid. The reason why they were paid was because the participant paid their premium. The insurance company, having received a payment, paid the claims. Then after paying the claim the participant's check bounced. When the check bounced, the participant's policy was retrospectively terminated, but the claim was still paid costing the company hundreds of thousands of dollars per year.
Which looks better in an audit report:
"Audit reviewed 50 transactions and noted one transaction that was processed incorrectly"
or
"Audit used CAATTs and tested every transaction over the past year. We noted XXX exceptions wherein the company paid YYY dollars on terminated policies."
However, the CAATTs driven review is limited only to the data saved on files in accordance with a systematic pattern. Much data is never documented this way. In addition saved data often contains deficiencies, is poorly classified, is not easy to get, and it might be hard to become convinced about its integrity. So, for the present CAATTs is a complement to an auditor's tools and techniques. In certain audits, CAATTs can't be used at all. But there are also audits that simply can't be made with due care and efficiently without CAATTs.
==Specialized software==
In the most general terms, CAATTs can refer to any computer program utilized to improve the audit process. Generally, however, it is used to refer to any data extraction and analysis software. This would include programs such as data analysis and extraction tools, [[spreadsheets]] (e.g. [[Microsoft Excel|Excel]]), databases (e.g. [[Microsoft Access|Access]]), [[statistical analysis]] (e.g. [[SAS System|SAS]]), [[generalized audit software]] (e.g. [[ACL (software company)|ACL]], Arbutus, EAS), [[business intelligence]] (e.g. [[Crystal Reports]] and [[Business Objects (company)|Business Objects]]), etc.
Benefits of audit software include:
*They are independent of the system being audited and will use a read-only copy of the file to avoid any corruption of an organization’s data.
*Many audit-specific routines are used such as [[sampling (audit)|sampling]].
*Provides documentation of each test performed in the software that can be used as documentation in the auditor’s work papers.
Audit specialized software may perform the following functions:
*[[Query language|Data queries]].
*[[Stratified sampling|Data stratification]].
*[[Sampling risk|Sample extractions]].
*[[Missing sequence identification]].
*[[Statistical analysis]].
*Calculations.
*Duplicate transaction identification.
*[[Pivot table]] creation.
*[[Cross tabulation]].
==CAATs Education and Professional Development==
===CAATs Courses===
CAATs are the fundamental tool that is used by the auditors. This tool facilitates them to make search from the irregularities from the given data. With the help of this tool, the auditors and accountants of any firm will be able to provide more analytical results. These tools are used throughout every business environment and also in the industry sectors too. With the help of computer-assisted audit techniques, more forensic accounting with more analysis can be done. It’s really a helpful tool that helps the firm auditor to work in an efficient and productive manner. Working with the CAATs, it is essential for the accountant or the auditor to select the right data, the selection process is very much tricky, and you need to be professional for it. After selecting the right data, import that to the CAATs, now the tool will automatically generate the analytical data. This tool contributes to the efficiency of the auditors. The fundamental course outline <ref>International Computer Auditing Education Association (ICAEA), "CAATs (Computer Assisted Audit Techniques) Courses", {{cite web |url=http://www.iacae.org/English/Training/CAATs_Courses.php |title=ICAEA--Training |accessdate=2015-02-26 |url-status=dead |archiveurl=https://web.archive.org/web/20150205182521/http://www.iacae.org/English/Training/CAATs_Courses.php |archivedate=2015-02-05 }}</ref> include:
* Computer Auditing Overview
* Legal and Ethical Issues for Computer Auditors
* Understanding CAATs
* Computer Auditing Project Planning
* Data Access Skill and Knowledge
* Data Verify Skill and Knowledge
* Data Analysis Skill and Knowledge
* Audit Finding Report Skill and Knowledge
===CAATs Certification Program===
There are several certification programs from various CAATs vendors and professional associations as the following:
# International Certified CAATs Practitioner ([https://archive.today/20150227044811/http://www.iacae.org/English/Certification/Certification.php ICCP]): established by the International Computer Auditing Education Association (ICAEA).
# ACL™ Certified Data Analyst ([https://web.archive.org/web/20150216105709/http://www.acl.com/services/acl-training-services/acda-certification-examination-experience/ ACDA]): established by ACL Services Ltd.
# Certified IDEA Data Analyst ([http://www.casewareanalytics.com/certification CIDA]): established by CaseWare Analytics.
# Jacksoft Certified CAATs Practitioner ([https://web.archive.org/web/20150226182631/http://www.jacksoft.com.tw/English/product/training.php JCCP]): established by Jacksoft Commerce Automation Ltd.
==Other uses of CAATs==
In addition to using [[data analysis]] software, the auditor uses CAATs throughout the audit for the following activities while performing data analysis:
===
Keeping electronic work papers on a centralized audit file or database will allow the auditor to navigate through current and archived working papers with ease. The database will make it easier for auditors to coordinate current audits and ensure they consider findings from prior or related projects. Additionally, the auditor will be able to electronically standardize audit forms and formats, which can improve both the quality and consistency of the audit working papers.
===Fraud detection===
CAATs provide auditors with tools that can identify unexpected or unexplained patterns in data that may indicate fraud. Whether the CAATs is simple or complex, data analysis provides many benefits in the prevention and detection of fraud.
CAATs can assist the auditor in detecting fraud by performing and creating the following,
===Analytical tests===
Evaluations of financial information made by studying plausible relationships among both financial and non-financial data to assess whether account balances appear reasonable (AU 329). Examples include ratio, trend, and [[Benford's Law]] tests.
===Data analysis reports===
===Curb stoning in surveys===
Curb stoning is the term for instances where a surveyor completes a survey form by making up data. Because some of the data should conform with Benford's law, this practice can be detected using CAATTs which provide the capability of performing such tests.
=== Note on the acronyms CAATTs vs CAATs ===
CAATTs and CAATs are used interchangeably. While CAATs has emerged as the more common spelling, CAATTs is the more precise acronym. The acronym CAATTs solves one of the two problems with defining the acronym. CAATs means:
'''C'''omputer '''A'''ided (or '''A'''ssisted) '''A'''udit '''T'''echniques (or '''T'''ools and '''T'''echniques)
The first "A" and the "T" can have two different meanings depending on who uses the term. By using the term CAATTs, one is clearly incorporating both "Tools" AND "Techniques."
==Comparison of tools==
===Comparison by specification===
{| class="wikitable sortable" style="text-align: left; font-size: 85%; width: auto; table-layout: fixed;"
|-
! style="width: 18em" | Product Name / Brand
! Developed by
! Latest stable version
! Latest release date
! OS
! [[Software license]]
! [[Open-source software|Open source]]
! Comments
|-
| [[Arbutus Analyzer]] || Arbutus Software || 7.00 || 2021-05-31 || [[Windows]] || {{Nonfree|[[Proprietary software|Proprietary]] [[Commercial software|commercial]]}} || {{No}} ||
|-
| [[Audit Command Language]] (ACL) || Galvanize || 15.0 || 2020-10-31 || [[Windows]] || {{Nonfree|[[Proprietary software|Proprietary]] [[Commercial software|commercial]]}} || {{No}} ||Starting 2014 provide a free Excel add-in
|-
| [[Easy2Analyse]] || QDAC.net. || 4.3 || 2015-05-15 || [[Windows]] || {{Nonfree|[[Proprietary software|Proprietary]] [[Commercial software|commercial]]}} || {{No}} ||Available in full and auditfiles version
|-
| Intrasoft Audit Support Computer Audit (Formerly known as ESKORT / SESAM) || Intrasoft International || 7.5<ref name="sesam78">{{cite web | title=Intrasoft COMPLIANCE Audit Support 7.0 | url=https://compliance.intrasoft-intl.com/| date=2021-09-02 | accessdate= 2021-09-02 }}</ref> || 2021-03-31 || [[Windows]] || {{Nonfree|[[Proprietary software|Proprietary]] [[Commercial software|commercial]]}} || {{No}} || ''Requires Excel for showing graphs and result of [[Benford law]] analysis.''
|-
| [[InfoZoom]] || humanIT || 9.0.5 || 2016-11-07 || [[Windows]] || {{Nonfree|[[Proprietary software|Proprietary]] [[Commercial software|commercial]]}} || {{No}} ||
|-
| [[Interactive Data Extraction and Analysis]] (IDEA) || CaseWare International Inc.|| 11.1<ref name="idea9.1">{{cite web|url=https://casewareanalytics.com/blog/product-close-whats-new-idea-102|title=IDEA Version 10.2|last=|first=|date=|website=|accessdate=9 May 2013}}</ref> || 2016-10-26 || [[Windows]] || {{Nonfree|[[Proprietary software|Proprietary]] [[Commercial software|commercial]]}} || {{No}} ||
|-
| TeamMate Analytics (formerly TopCAATs) || Wolters Kluwer || 5.1 || 2017-09-18 || [[Windows]] || {{Nonfree|[[Proprietary software|Proprietary]] [[Commercial software|commercial]]}} || {{No}} || ''Requires [[Microsoft Excel]] (TeamMate Analytics runs within Excel)''
|-
| SoftCAAT/ eCAAT<ref>{{Cite web|url=http://wincaat.com/Products/SoftCAAT.aspx|title = WINCER: Products}}</ref><ref name="wincaat.com">{{cite web |url=http://wincaat.com/Products/eCAAT.aspx |url-status=dead |archive-url=https://web.archive.org/web/20160408200442/http://wincaat.com/Products/eCAAT.aspx |archive-date=2016-04-08 |title=WINCER: Products}}</ref> || Wincer Infotech Limited || 9.0/ 9.0 || 2016-04-04 || [[Windows]] || {{Nonfree|[[Proprietary software|Proprietary]] [[Commercial software|commercial]]}} || {{No}} || ''SoftCAAT is an independent application. eCAAT requires [[Microsoft Excel]] (eCAAT is an Excel add-in)<ref name="wincaat.com"/>''
|}
===Comparison by analysis features===
The following table compares features of specialized computer-aided audit tools. The table has several fields, as follows:
#'''Product Name''': Product's name; sometime includes edition if a certain edition is targeted.
#'''Age analysis''': Specifies whether the product supports making age analysis (stratification by date).
#'''Benford's law''': Specifies whether the product supports finding abnormal distribution of specific digits accordingly to [[Benford's law]].
#'''Calculated field''': Specifies whether the product supports adding extra calculated fields into the table/file. Usually implies using an expression builder feature to build up expressions for defining the field calculation.
#'''Drill-down (Table)''': Specifies whether the product supports [[drill-down]] features by zooming in (filtering) on selected rows in the table.
#'''Drill-down (Pivot)''': Specifies whether the product supports [[drill-down]] features through pivot table.
#'''Matching''': Specifies whether the product supports finding matching items for a specific field in a table/file. For example, this could be used to find duplicate billings of invoices within the sales ledger.
#'''Matching (Fuzzy)''': Specifies whether the product supports finding matching items for a specific field using fuzzy comparison. For instance, values compared are similar but not exactly the same (e.g., using [[Levenshtein distance|Levenshtein matching]]).
#'''Sample (Random)''': Specifies whether the product supports selecting a random sample of rows from the table/file (population).
#'''Sample (Monetary unit)''': Specifies whether the product supports selecting a monetary unit sample of rows from the table/field (population). This is also known as dollar-unit sampling (when values are in U.S. currency).
#'''Sequence check (Gap)''': Specifies whether the product supports can find (identify) gabs (in sequences) for a specific field. For example, finding a broken sequence in an invoice number sequence.
#'''Sort field''': Specifies whether the product supports sorting (indexing) by a specific field (column). Sorting helps identifying blank/empty values or excessive (out-of-band) values.
#'''Sort multiple fields''': Specifies whether the product supports sorting by multiple fields (columns).
#'''Statistics''': Specifies whether the product supports calculation and presentation of various statistics on a specific field (e.g., for the values of a numeric field such as a total number of positive numbers, total number negative numbers, average value (balance), etc.)
#'''Stratification''': Specifies whether the product supports [[Data stratification|stratification]] on number (amount) values in specified intervals. Splits the population into strata (intervals) and aggregates (summarizes) values. Can be used to find largest, smallest and average amount transactions (rows).
#'''Total row''': Specifies whether the products supports displaying a total row for the table/file, e.g. accumulated numerical value.
{| class="wikitable sortable" style="text-align: center; font-size: 85%; width: auto; table-layout: fixed;"
|-
! style="width: 18em" | Product Name
! Age Analysis
! [[Benford's law]]
! Calculated field
! Drill-down (Table)
! Drill-down (Pivot)
! Matching
! Matching (Fuzzy)
! Sample (Random)
! Sample (Monetary unit)
! Sequence Check (Gap)
! Sort field
! Sort multiple fields
! Statistics
! Stratification
! Total row
|-
| style="text-align: left" | [[Analyzer - Arbutus Software]]|| {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}}
|-
| style="text-align: left" | [[Audit Command Language]] (ACL) || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}}
|-
| style="text-align: left" | [[Easy2Analyse]] (QDAC.net) || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}}
|-
| style="text-align: left" | Intrasoft Audit Support Computer Audit || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}}
|-
| style="text-align: left" | [[InfoZoom]] || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}}
|-
| style="text-align: left" | [[Interactive Data Extraction and Analysis]] (IDEA) || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}}
|-
| style="text-align: left" | TeamMate Analytics / TopCAATs || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}}
|-
| style="text-align: left" | SoftCAAT/ eCAAT || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{No}} || {{Yes}} || {{Yes}} || {{Yes}} || {{No}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}}
|}
===Comparison by other features===
#'''Audit log''': Specifies whether the product logs activity performed by the user (the auditor) for later reference (e.g., inclusion into audit report).
#'''Data graph''': Specifies whether the product provides graphs of results.
#'''Export (CSV)''': Specifies whether the product support exporting selected rows to a [[comma-separated values]] formatted file. Usually also implies capability to the clipboard (in CSV format) for pasting into applications supporting pasting from CSV files such as [[Microsoft Excel|Excel]].
#'''Export (DBF)''': Specifies whether the product support exporting (saving) selected rows to a dBase Table file.
#'''Export (Excel)''': Specifies whether the product support exporting (saving) selected rows to an Excel file. Usually also implies capability to copy the rows to the clipboard (in some format) for pasting into Excel.
{| class="wikitable sortable" style="text-align: center; font-size: 85%; width: auto; table-layout: fixed;"
|-
! style="width: 18em" | Product Name
! Audit log
! Data graph
! Export (CSV)
! Export (DBF)
! Export (Excel)
|-
| style="text-align: left" | [[Analyzer - Arbutus Software]] || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}}
|-
| style="text-align: left" | [[Audit Command Language]] (ACL) || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}}
|-
| style="text-align: left" | [[Easy2Analyse]] (QDAC.net) || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}}
|-
| style="text-align: left" | Intasoft Audit Support Computer Audit || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}}
|-
| style="text-align: left" | [[InfoZoom]] || {{Yes}} || {{Yes}} || {{Yes}} || {{No}} || {{Yes}}
|-
| style="text-align: left" | [[Interactive Data Extraction and Analysis]] (IDEA) || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}}
|-
| style="text-align: left" | TeamMate Analytics / TopCAATs || {{Yes}} || {{Yes}} || {{Yes}} || {{No}} || {{Yes}}
|-
| style="text-align: left" | SoftCAAT/ eCAAT || {{Yes}} || {{Yes}} || {{Yes}} || {{No}} || {{Yes}}
|}
===Comparison by data preparation features===
#'''Append/Merge''': Specifies whether the product can combine two tables/files with identical fields into a single table/file. For example, it could be doing a merge of two years of accounts payable tables/files into a single table/file.
#'''Import wizard''': Specifies whether the product provides an import wizard to assist in importing (interpretation, conversion, formatting) data for analysis.
#'''Import (CSV)''': Specifies whether the product supports import data from a [[comma-separated values]] formatted file.
#'''Import (DBF)''': Specifies whether the product supports import data from [[dBase]] DBF files.
#'''Import (Excel)''': Specifies whether the product supports import data from [[Microsoft Excel]] workbook file. Note that different Excel format versions may apply.
#'''Import (SAF-T)''': Specifies whether the product supports import data from an OECD [[SAF-T]] file. As SAF-T is based on [[XML]] a more general XML import may cover the feature although direct SAF-T import improves the user experience. Note that different SAF-T format versions may apply.
#'''Import (SIE)''': Specifies whether the product supports import data from a [[SIE (file format)|SIE format]] file.
#'''Import (XBRL-GL)''': Specifies whether the product supports import data from a [[XBRL GL]] file. As XBRL-GL is based on [[XML]] a more general XML import may cover the feature although direct XBRL-GL import improves the user experience. Note that different XBRL-GL format versions may apply.
{| class="wikitable sortable" style="text-align: center; font-size: 85%; width: auto; table-layout: fixed;"
|-
! style="width: 18em" | Product Name
! Append/Merge
! Import wizard
! Import (CSV)
! Import (DBF)
! Import (Excel)
! Import (SAF-T)
! Import (SIE)
! Import (XBRL-GL)
|-
| style="text-align: left" | [[Analyzer - Arbutus Software]]|| {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}}
|-
| style="text-align: left" | [[Audit Command Language]] (ACL) || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{dunno}} || {{dunno}} || {{Yes}}
|-
| style="text-align: left" | [[Easy2Analyse]] (QDAC.net)|| {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}}
|-
| style="text-align: left" | Intrasoft Audit Support Computer Audit (SESAM) || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}}
|-
| style="text-align: left" | [[InfoZoom]] || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{dunno}} || {{dunno}} || {{dunno}}
|-
| style="text-align: left" | [[Interactive Data Extraction and Analysis]] (IDEA) || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}}<ref name="idea9.1"/> || {{Yes}} || {{Yes}} || {{Yes}}
|-
| style="text-align: left" | TeamMate Analytics / TopCAATs || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{dunno}} || {{Yes}}
|-
| style="text-align: left" | SoftCAAT/ eCAAT || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{Yes}} || {{No}} || {{No}} || {{No}}
|}
==See also==
* [[Generalized audit software]]
* [[Information technology audit]]
* [[Separation of duties]]
==External links==
* [https://web.archive.org/web/20150516002553/http://www.arbutussoftware.com/performance-results.html Performance Comparison]
* [https://auditorsdesk.in/our-solutions/by-tools/ Audit Automation Tools]
* [http://forum.it-tech.com.br Fórum]
==References==
*<u>'''Information Technology Control and Audit'''</u>; Frederick Gallegos, Sandra Senft, et al.; ''2nd Edition'' {{ISBN|0-8493-2032-1}}
*<u>'''Internal Audit: Efficiency through Automation'''</u>; David Coderre.; ''1st Edition'' {{ISBN|978-0-470-39242-3}}
{{reflist}}
[[Category:Computer-aided audit tools| ]]
[[Category:Information technology audit]]
[[Category:Data analysis software]]
| |||