Title: Data modelling and the audit

Authors: Graham Gal

Addresses: Isenberg School of Management, University of Massachusetts, Amherst, MA 01003, USA

Abstract: The development of a corporate-wide data model is a tool to integrate firm's data. The lack of staff is an impediment to data management efforts. Creation of a comprehensive data-model includes collecting and verifying extensive meta-data information. Meta-data includes provenance (both processes and code), structure, relationships among data, data transformation, and units responsible for data items. Inclusion of meta-data will enhance data quality and provide support for users' data understanding and use. The more complete and detailed the corporate data model, the better information can be communicated across the organisation. This meta-data can be an explicit representation of management policies. For instance, employee type with rights to enter or manipulate data elements and the skill and knowledge requirements. These policies can also represent internal controls. This paper examines management policies within data-models and use of this information to test audit assertions on the effectiveness, design, and operation of internal controls.

Keywords: data modelling; internal controls; REA models; COBIT; database states; internal control testing; management policy; auditing; data integration; metadata.

DOI: 10.1504/IJAUDIT.2015.076441

International Journal of Auditing Technology, 2015 Vol.2 No.4, pp.316 - 332

Received: 10 Mar 2015
Accepted: 12 Aug 2015

Published online: 09 May 2016 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article