Disruptive Technology—A Game Changer in Audit Processes
CA. Anand Prakash Jangid
The author is a member of the Institute. He can be reached at anandjangid@gmail.com and eboard@icai.in.
“The present-day auditors are struggling to stay up harmony of giant information, thorough administrative weights, and ever-developing customer desires, alongside other headway of innovation. The intensity of cognitive technology, and the way it will change the audit process, is stunning. The many changes occurring within the audit environment as cognitive technology evolves, joined with other innovative evolutions, for instance like AI (AI), Machine Learning (ML), Predicative Analysis, Block Chain and Robotic Process Automation (RPA) — will change the audit for all time the complete effect of those disruptive technologies isn’t felt at now, however the benefits and effectiveness gains are becoming apparent. Read on …”
With rapidly evolving inventive advancements and customer expectations regarding the audit functions in offering, some benefit included value addition, auditors must get on top of things by getting adept with technologies utilised by their customers. Simultaneously, adding proficiency to their own job cycles. The text diagrams in the article here show some key territories where technology will change the audit worldview. Understanding the capacities, openings and dangers of these troublesome innovations is basic for the eventual fate of the review calling. Disruptive Technologies are going to be the game changer in Audit Processes.
A New Era for Audit
It’s essential for audit firms to venture up to this challenge to meet the ever-changing requirements of the profession. As organisations change their activities to turn out to be more advanced, and maybe more worldwide, many will upgrade their IT frameworks with more refined technologies. Subsequently, audit experts must grasp the utilization of cutting-edge devices, for example, Data Analytics, RPA, Automation and Cognitive intelligence to oversee processes, and more informed decision making.
Additionally, they will have to keep on updating their innovative capabilities and technologies to keep up their audit quality and fortify the pertinence of their audits into what is to come.
Impact on Audit
There was a time, when auditors verified physically through financial data to chase down an oddity which will have made them questionable about the appropriateness of a customer’s declaration. Presently, on account of inventive new technologies, the gathering of practically incredible measures of data and therefore, the use of cutting-edge examination and cognitive technologies make it possible to quickly dissect huge, more complete populaces of monetary and non-monetary information.
As we will move further in this article, we can see how these cognitive technologies can help auditors to analyse more structured and unstructured data and redesign their audit process. For instance, cognitive technology allows auditors to acquire information from non-traditional sources including online media destinations, TV, radio and the Internet, and process along with client’s internal information. Thereby, improving the quality of the audits by getting a clear picture about the client’s risk profile, financial reporting controls and the operating environment.
Additionally, the auditor can accumulate and analyse greater information, alongside the client’s economic and non-financial documents and, using new superior analysis, threat can be examined extra precisely, and the expected threats can be mitigated. These capacities can enhance the satisfactory level of audit and extra facts can be analysed in lesser time. Also, with the assistance of visualisation equipment like Microsoft PowerBI, the auditors can plot the relationships and transactions as nicely as the irregularities of the approaches and statistics for higher understanding.
Artificial Intelligence & Data analytics
Artificial Intelligence (AI) is now being utilised in various areas of life, transferring to driverless cars, hospitality area and portfolio management. Accounting and auditing will additionally be affected. Auditors can make their systems smarter by making use of algorithms to analyse huge data thereby optimally using synthetic intellingence at work.
AI and Machine Learning (ML) are now widely used in applications and processes across the world in every sector. The auditing profession is not an exception. These days, even auditors are utilising AI (Robots) in their professional practices for streamlining the processes involved in their work. Data categorisation can be done by using AI bots to automatically tag information into different accounts. The bots can automatically classify a set of data into different charts of accounts. For example, the repairs bill and purchase of fixed assets bill from the same vendor. Big data sets, including contracts and agreements and other routine transactions, can be scrutinised quickly and accurately, thereby helping the auditors to focus on the more problematic areas, which require human professional judgement. Auditors can perform hundred per cent audit of the client’s entire general ledger data using automated tools. Also, the automated tools can perform a variety of analyses and provide an extensive list of exceptions for the auditors. Based on the validation/invalidation of the exceptions, the machine derives a pattern from the auditor’s conclusions and reciprocates the same pattern in a similar situation.
The world says, “We are in the Fourth and the Last Industrial Revolution; and the new technological know-how and digitisation will take over the human race.” So is the concern amongst auditors, they worry that on imposing Leading part technologies, they will be the first to have been changed with the aid of these smart machines, however in truth they must get geared up and put together to adapt to the new procedure via obtaining knowledge, placing belief in the know-how obtained and working towards a sustainable framework by means of gaining knowledge of new skills. They have to meet the expectations of assurance and make auditing efficient. And never forget that one of the synonyms of audit is ‘To Analyse’. Analysis has usually been a sub-genre of Audit, unlikely to current scenario where it is found to be more statistically oriented.
Data analytics in audit encompass discovering and analysing patterns, identifying outliers, and extracting other useful information from data through computer-assisted techniques. Data analytics involve both exploratory and predictive modelling, as well as analysis of data with the goal of identifying trends in the underlying data and generating meaningful insights.
The use of statistics analytics in the audit can embody a huge vary of techniques. Certain easy statistics analytics can be carried out with the aid of the auditor, whilst greater complicated facts analytics can also contain the use of an inside expert [expert] in the evaluation of information (e.g., Exploratory Data Analysis (EDA) Specialist).
With the increasing volume of data in businesses today, data analytics can be used as an audit technique to understand and analyse large volumes of data in a better way. Equipped with a more in-depth knowledge of the entity’s business, auditors can focus on items of greater audit interest. Data analytics may also provide insights to clients. The use of data analytics may not always result in efficiencies, but in all cases data analytics can enhance audit quality through increased effectiveness.
Auditors and Machine learning
Machine Learning additionally improves the auditor’s capability to ask the proper questions to CFO, audit committee and Directors Board. It additionally helps the auditors to enhance their information with the aid of hastening and automating the audit process, and thereby reaching greater satisfactory and efficiency.
“Machine Learning additionally improves the auditor’s capability to ask the proper questions to CFO, audit committee and Directors Board. It additionally helps the auditors to enhance their information with the aid of hastening and automating the audit process, and thereby reaching greater satisfactory and efficiency.”
Blockchain Technology
Blockchain is a database that holds information and applications in closely encrypted “blocks” of character transactions as effects of executable files. The packages and codes can solely be brought and can’t be edited or deleted, with every block linked to the preceding one making a ‘blockchain’. The digital ledger shares and tracks records associated to contracts and transactions. The documents are permanent, verifiable and secure. In summary, blockchain is a allotted database consisting of blocks of gadgets that are timestamped, verifiable, permanent,hashed and linked to different blocks, with these properties: synchronised, unalterable, deterministic, non-cancellable and fast.
According to a white paper subsidised through the Chartered Professional Accountants of Canada, the American Institute of CPAs and the University of Waterloo Centre for Information Integrity and Information System Assurance, “With blockchain-enabled digitisation, auditors ought to installation extra automation, analytics and machine-learning capabilities, such as routinely alerting applicable parties about uncommon transactions on a close to real-time basis. Supporting documentation, such as contracts, agreements, buy orders and invoices, ought to be encrypted and securely saved or linked to a blockchain. By giving CPA auditors get entry to unalterable audit evidence, the tempo of economic reporting and auditing ought to be improved.”
“To use blockchain as a credible data source, an audit of the process to ensure system confidence and the integrity of the data is essential, thereby creating the need for more auditors and different skills.”
To use blockchain as a credible data source, an audit of the process to ensure system confidence and the integrity of the data is essential, thereby creating the need for more auditors and different skills. Both facets of the transaction are recorded in a shared single set of books, developing a triple entry machine the use of a consensus manner to validate the transaction and create a new entry to be posted in a shared ledger with a cryptographically sealed receipt with a special digital signature. The transparency blended with the non-stop updating offers real-time data to customers and will increase the faith degree in the data.
The advantages of the technology are:
- Transparency due to cryptography and public/private keys.
- Resiliency due to distributed network; and
- Immutability due to algorithms that mathematically link data blocks without a third party.
The above traits make it a community of have confidence and beautify the potential to function analytics and forecasting. The blockchain method affords auditors the capacity to take a look at the total populace throughout more than one entities in a brief time and generate an exception report, as adversarial to the sampling strategies in use today. Confirmations may additionally now not be wished due to the fact of the allotted ledger verification of transactions at inception. Forgeries and changes to transactions can be detected immediately, due to the signals to all contributors in the chain. Using blockchain will enable auditors to limit time spent on redundant duties and enlarge price by way of devoting greater time to interior controls, analytics, and strategic initiatives. See Table two above for manageable new careers for auditors due to the fact of blockchain.
What opportunities does blockchain bring to the audit process?
- The days of sample-based testing will be obsolete since the auditors will resort to blockchain to test the whole population, thus increase the level of assurance.
- The transformation that analytics brings to transaction audit and audit risk assessment procedures may require auditors consider redefining audit objectives and use technology-driven approaches to achieve them.
- Companies facing a pending audit will not be able to reverse engineer documentation in bulk to satisfy compliance, as every action is time stamped and shared with all members of the blockchain, given that editing previous entries is not possible.
- Blockchain presents a challenge to the traditional audit approach, given there’s no practical way to use point-in-time forensic analysis—the standard audit tool. Assurance in a blockchain environment derives from irrefutable transaction history and integrity. So in essence, you have a system that has full integrity, that’s 100% accurate.
- Simplify and enhance transparency in core business functions such as supply chain management, auditing, tax, compliance and back-office operations
- Help reduce fraud through enhanced identity management
- Rapidly increase the volume of automated transactions and hence drive cost efficiencies in the audit environment.
- New efficiencies can help enable a culture of innovation.
- Blockchain are inherently resistant to modification of any stored data. Functionally, a blockchain can serve as an open, distributed ledger that can record transactions between two parties efficiently and in a verifiable and permanent way.
- Instead of asking clients for bank statements or sending confirmation requests to third parties, auditors can easily verify the transactions on publicly available blockchain ledgers.
Auditors and Blockchain
Blockchain science is built on on statistics , enabling consensus, actual time facts recording and access, retaining audit logs. It provides extremely good chance to optimise monetary reporting and audit processes. Currently, audit requires assessment of more than one control area and their supporting, substantive data and their vouchers, spreadsheet, account reconciliation, third party confirmations, journal ledgers and voucher, assessment of subledgers and path balance. All of these are supplied to auditor in a range of digital and manual formats. In a blockchain environment, the auditor is ought to thoroughly study the bloackchain nodes to have access to real-time records. This may also enable an auditor to attain records required for the audit in a consistent and routine format. Auditor in the long run on maturity of blockchain , may also think about to constantly audit corporations the use of the blockchain. This will make audit extra environment friendly and advantageous, offering possibilities to auditors to centre their attention on riskier and more complicated transactions while performing audit services in close to actual time. Skill which auditors will have to observe is expert judgement when analysing accounting estimates and different judgements made by using administration in the coaching of monetary statements. In addition, for areas that come to be automated, they will additionally want to consider and check inside controls over the information integrity of all sources of applicable monetary statistics such as clever contracts and oracles.
“Chartered accountants, besides providing assurance role, can play a significant role in providing advisory on blockchain governance and strategy, risk management.”
Chartered accountants, besides providing assurance role, can play a significant role in providing advisory on blockchain governance and strategy, risk management. They can enable review of consensus mechanism, key management, smart contract, oracle review and perform third party control review. They can play significant role in contributing to first time master data input validation, controls and analytic rules and model, laying and challenging assumption, driving reliable automations. Also, they can leverage tool for delivering their assurance role through these technologies to be more agile in leveraging controls and forward-looking on the insights they can bring to decision makers. Internal audit of some business processes could also become more “continuous” and closer to real-time. They could possibly in long run play administrator function in case of permissioned blockchain solutions which require a trusted, independent and unbiased third party to perform the functions of a central KYC before they are granted access to a blockchain. This central administrator could validate the enforcement and monitoring of the blockchain’s protocols. For a permissioned blockchain, an arbitration function might be needed in the future to settle disputes among the consortium-blockchain participants. Participants on the blockchain may require this type of function to enforce contract terms where the spirit of the smart contract departs from a legal document, contractual agreement or letter.
“For a permissioned blockchain, an arbitration function might be needed in the future to settle disputes among the consortium-blockchain participants.”
Robotic Process Automation (RPA)
Auditing techniques have traditionally consisted of personal computer established equipment and strategies linked with guide steps. RPA takes these disparate movements into a single built-in computerised process, permitting the auditors to function at greater effeciency levels. It can automate repetitive duties in taxation, advisory and assurance areas. Some real-life initiatives encompass instruction of tax returns and reconciliations through public audit firms. Software robots can be deployed to operate rule-based features such as reconciliations and analytical methods in income audits. Ever growing quantities of information (‘big data’) makes the audit information preparation, file organisation, integration and audit assessments pretty time eating and inclined to errors.
RPA software program can interact with different utility software program and automate strategies that are structured, rule based totally and repetitive, and automate duties that span throughout extraordinary software program processes. While RPA’s attainable to disrupt the standard audit procedures and audit prices are diagnosed with the aid of professionals, it is nevertheless in the preliminary ranges of adoption. It can lead to fee financial savings with the aid of growing efficiencies however combining RPA with auditors’ expert skepticism wishes to be explored to grant a value-added provider to purchasers.
Auditors and RPA
It is quite vivid that auditing BOT environment is quite different from conventional audits. Auditors must upskill themselves and to adapt to such complex environments. The day is not far when we will see one BOT auditing another BOT, and auditors who manage to remain human will review just the exceptions.
Besides Enabling Audit and Assurance, CAs can additionally grant advisory on RPA software administration: protecting identification of appropriate processes, their commercial enterprise instances and prioritisation. Auditors can help in vendor and method determination for prioritising determination standards and supplying a factor of view primarily based on market insights. They can also assist in PoC administration, masking determination and, definition of case and facilitation of supplier workshops. Auditors can also assist in project shipping protecting manner analysis, Robot layout & implementation. They can also provid training on diagrams and execution of distinct tiers of RPA. Auditors, making use of RPA, can also assist in rollout administration for effectively scaling the digital workforce.
Cyber Security
Cyber protection is the physique of technologies, techniques and practices designed to shield networks, computers, packages and records from attacks, injury or unauthorized get entry to.
Cybersecurity, computer security or IT security is the protection of computer systems from the theft and damage to their hardware, software or information, as well as from disruption or misdirection of the services they provide.
According to Forbes, the world cybersecurity market is predicted to attain one hundred seventy billion through 2020. This speedy market increase is being fuelled by means of an array of science trends, inclusive of the onslaught of initiatives with ever-evolving safety requirements, like ‘bring your personal device’ (BYOD) and the net of matters (IoT); the fast adoption of cloud-based functions and workloads, extending protection desires past the ordinary facts centre; and stringent records safety mandates.
Cyber security has never been simple. And because attacks evolve every day as attackers become more inventive, it is critical to properly define cyber security and identify what constitutes good cyber security.
Cyber security protects the data and integrity of computing assets belonging to or connecting to an organization’s network. Its purpose is to defend those assets against all threat actors throughout the entire life cycle of a cyber-attack.
Kill chains, zero-day attacks, ransomware, alert fatigue and budgetary constraints are just a few of the challenges that cyber security professionals face. Cyber security experts need a stronger understanding of these topics and many others, to be able to confront those challenges more effectively.
A complex hack may not be a CEO’s fault, but it is absolutely his or her responsibility. Investors and consumers need to demand more from the executives to whom they entrust their digital lives. Cybersecurity includes controlling physical access to the hardware, as well as protecting against harm that may come via network access, data and code injection. Also, due to malpractice by operators, whether intentional or accidental, IT security is susceptible to being tricked into deviating from secure procedures through various methods.
“Also, due to malpractice by operators, whether intentional or accidental, IT security is susceptible to being tricked into deviating from secure procedures through various methods.”
The field is of growing importance due to the increasing reliance on computer systems and the Internet, wireless networks such as Bluetooth and Wi-Fi, the growth of ‘smart’ devices, including smartphones, televisions and tiny devices as part of the Internet of Things.
The most difficult challenge in cyber security is the ever-evolving nature of security risks itself. Traditionally, organisations and therefore,the government have focused most of their cyber security resources on perimeter security to guard only their most vital system components and defend against known threats.
Auditors and Information Security
Auditors can provide services like:
- Verifying that information processes meet the security criteria, requirements or policy, standards, and procedures.
- Defining and implementing processes and techniques to ensure ongoing conformance to security policies, standards, and legal and regulatory requirements.
- Carrying out security compliance audits in accordance with an appropriate methodology, standard or framework.
- Providing impartial assessment and audit reports covering security compliance audits, investigations, and information risk management.
- Providing an independent opinion on whether your organisation is meeting information assurance control objectives.
- Developing audit plans and audit regimes that match your organisation’s business needs and risk appetite.
- Identifying your organization’s systemic trends and weaknesses in security.
- Recommending responses to audit findings and appropriate corrective actions.
- Recommending appropriate security controls.
- Assessing the management of information risk across the organisation or business unit.
- Recommending efficiencies and cost-effective options to address non-compliance issues and information assurance gaps identified during the audit process.
- Objectively assessing the maturity of an existing information auditing function using cross-government benchmark standards.