It may be performed as part of a financial statement audit or be separately required under BRSA, CMB or MASAK regulations. IT general controls, application controls and data analytics are its core elements.
Source: BDS 315, COBIT
Related terms
IT general controlsControls over access management, change management, IT operations and system development that ensure information systems operate reliably.Application controlsAutomated or IT-dependent manual controls embedded in a software application that ensure transactions are processed completely, accurately and with authorisation.Information security management system (ISO/IEC 27001)A framework that protects the confidentiality, integrity and availability of information through a risk-based management system and can be certified to ISO/IEC 27001.Adverse opinionThe opinion in which the auditor states that the financial statements are not presented fairly, where misstatements are both material and pervasive.Agreed-upon proceduresAn engagement in which the practitioner performs procedures agreed with the entity and, where relevant, a third party, and reports only the findings without providing assurance.Analytical proceduresThe evaluation of financial information through analysis of plausible relationships among financial and non-financial data.
Last updated: October 31, 2026 · This definition is for general information only.