Page 247 - CA Final PARAM Digital Book.
P. 247

QNO      Technological risks                                                    New Course – (SM23)
          DAA.920 TITANIUM CNO -- DAA.280
                   Emerging technologies can bring great benefits, but they also come with a varied set of substantial risks.
                   Give some examples of technology risks of digital system and the control considerations to consider while
                   assessing technology risk
          Answer  Some examples of technology risks where auditors should test the appropriate controls for relying on the
                   digital systems (Similar to concept of IT Risk)

                   1. Access Control and Authorization:
                      -   The possibility of information technology personnel gaining access privileges beyond those necessary
                          to perform their assigned duties, leading to insufficient segregation of duties.
                      -   Unauthorized access to data that might result in destruction of data or improper changes to data.
                      -   Unauthorized changes to systems or programs.

                   2. Data Accuracy and Integrity:
                      -   Reliance on systems or programs that are inaccurately processing data, processing inaccurate data,
                          or both.
                      -   Unauthorized access to data that might result in destruction of data or improper changes to data,
                          including  the  recording  of  unauthorized  or  non-existent  transactions  or  inaccurate  recording  of
                          transactions (specific risks might arise when multiple users access a common database).
                      -   Unauthorized or erroneous changes to data in master files.
                      -   Inappropriate manual intervention.

                   3. Data Availability:
                      -   Potential loss of data or inability to access data as required.

                   4. System Maintenance and Updates:
                      -   Failure to make necessary or appropriate changes to systems or programs.
                      -   Unauthorized or erroneous changes to systems or programs.
                      -   Inappropriate manual intervention.

                   5. Service Providers and External Threats:
                      -   Risks introduced when using third-party service providers.
                      -   Cybersecurity risks.

          QNO      Emerging technologies                                                  New Course – (SM23)
          DAA.940 TITANIUM CNO -- DAA.320

                   Give example of emerging technologies available for Next Generation Audit along with the risks associated
                   with it.
          Answer  Drone Technology: Using drone technology in the remote locations for stock counts. Drones have  great
                   payload capacity for carrying sensors and cameras, thus they can photograph and physically examine the
                   count of large quantities of fixed assets and inventory.

                   Augmented  reality:  The  technology  allows  users  to  view  the  real-world  environment  with  augmented
                   (added) elements, generated by digital devices.

                   Virtual reality: VR goes a step forward and replaces the real world entirely with a simulated environment,
                   created through digitally generated images, sounds, and even touch and smell. Using special equipment,
                   such as a custom headset, the user can explore a simulated world or simulate experiences such as flying or
                   skydiving.

                   Metaverse: The metaverse is the emerging 3-D digital space that uses virtual reality, augmented reality, and
                   other  advanced  internet technology  to  allow  people  to  have  lifelike  personal  and  business  experiences
                   online. It represents a convergence  of  digital technology  to combine  and extend the  reach and use of
                   Cryptocurrency, Artificial Intelligence (AI), Augmented Reality (AR) and Virtual Reality (VR)
        www.auditguru.in                                                      PARAM                               12.6 | P a g e
   242   243   244   245   246   247   248   249   250   251   252