What is Benchmarking automated controls?
In short
An automated application control that hasn't changed can be tested once and then relied on in later years by confirming it hasn't changed (a benchmark), instead of retesting it each year.
Key takeaways
- It depends on effective information technology (IT) general controls over program changes.
- The auditor periodically re-establishes the benchmark.
- Automated controls work consistently, so a smaller test is often enough.
Where it's tested
AUD: Information Technology (IT) Controls in the Audit — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
An auditor finds that a company's automated three-way match control is well designed, but application programmers have unrestricted access to modify programs in the production environment. What is the effect on the auditor's ability to rely on the automated control?