James Hall Accounting Information Systems Comprehensive Study Guide
The Information System: An Accountant’s Perspective
Information is recognized as a vital business resource, categorized alongside traditional resources like raw materials and labor. It is essential for managing the physical resources of a firm. An information system is not a natural system but an artificial one designed to serve a common purpose through interrelated components. Within the business context, the Accounting Information System (AIS) is distinguished from the Management Information System (MIS) primarily by the nature of the transactions they process. AIS handles financial transactions, such as the sale of products or cash disbursements, and non-financial transactions that directly affect the processing of financial transactions. MIS processes non-financial transactions that do not traditionally fall under the AIS umbrella, such as market research and advertising.
The AIS is composed of three major subsystems. The Transaction Processing System (TPS) converts economic events into financial transactions, records them in accounting records, and distributes information to operations personnel. The General Ledger/Financial Reporting System (GLS/FRS) produces traditional financial statements and legal reports. The Management Reporting System (MRS) provides internal management with discretionary financial information for decision-making. Information quality is judged by five characteristics: relevance, accuracy, completeness, summarization, and timeliness. Reliability is a prerequisite for information to have value; unreliable information is essentially worthless.
Management is divided into three tiers with distinct information needs. Operations management is responsible for controlling day-to-day operations and requires highly detailed, transaction-level data. Middle management handles short-term planning and coordination, requiring summarized information to report on performance and problems. Top management focuses on long-term strategic planning and requires highly summarized information. The flow of information is both downward (budgets and instructions) and upward (performance reports).
Introduction to Transaction Processing
Transaction cycles are organized into the revenue, expenditure, and conversion cycles. The revenue cycle includes sales order processing and cash receipts. The expenditure cycle includes purchasing/accounts payable, cash disbursements, and payroll. The conversion cycle consists of the production system (planning, scheduling, and control) and the cost accounting system, which monitors cost information and contributes to inventory valuation. Each cycle manages specific financial transactions, which are economic events that affect the assets and equities of the firm, such as purchasing inventory or paying employees.
Documentation techniques are critical for understanding and auditing systems. Data Flow Diagrams (DFDs) represent the logical path of information through a system, using only four symbols: process, data store, data flow, and entity. Entity-Relationship (ER) Diagrams model the relationships between resources, events, and agents. Document flowcharts depict the physical system, illustrating the relationship between processes and the documents that trigger activities. System flowcharts show the relationship between input sources, programs, master files, and output products. Program flowcharts describe the internal logic of a computer program module.
Data processing approaches include batch processing and real-time processing. Batch processing groups similar transactions and processes them together after a time lag, which is efficient for high-volume, non-critical transactions like payroll. Real-time processing records transactions as they occur, providing up-to-date information for critical activities like sales order entry. Modern large-scale systems often use real-time data collection with batch updating for non-critical accounts to balance efficiency and data currency. Files in these environments include master files (permanent data), transaction files (temporary records), archive files (historical records), and reference files (standards for processing).
Ethics, Fraud, and Internal Control
Business ethics involves the social impact of technology and the formulation of policies for its ethical use. Ethical principles include proportionality (benefits must outweigh risks), justice (benefits/risks are distributed fairly), and informed consent. Fraud is defined by five conditions: false representation, material fact, intent to deceive, justifiable reliance, and injury or loss. Employee fraud usually involves the direct conversion of assets to personal benefit, whereas management fraud involves misstating financial performance to gain promotions, bonuses, or to inflate stock prices. Common fraud schemes include lapping (robbing one customer's account to cover another) and misappropriation of assets.
The Sarbanes-Oxley (SOX) Act and Committee of the Sponsoring Organizations (COSO) frameworks mandate a robust internal control system. SOX Section 302 requires CEOs and CFOs to certify internal controls quarterly and annually. Section 404 requires management to report on the effectiveness of internal controls over financial reporting. The Public Company Accounting Oversight Board (PCAOB) oversees auditors and sets standards. Internal control objectives include safeguarding assets, ensuring accurate accounting records, promoting efficiency, and complying with management policies.
Internal controls are categorized as preventive (limiting access, credit checks), detective (bank reconciliations, inventory counts), or corrective (fixing errors identified by detective controls). The five components of the COSO framework are the control environment (management philosophy and organizational structure), risk assessment, information and communication, monitoring, and control activities. Physical control activities include transaction authorization, segregation of duties (authorizing vs. processing vs. custody), supervision, accounting records (audit trail), access controls, and independent verification.
The Revenue and Expenditure Cycles
The revenue cycle begins with a customer purchase order, which triggers the creation of a sales order. Key documents include the packing slip (list of contents), shipping notice (sent to billing), and bill of lading (contract with the carrier). Segregation of duties is vital: the credit department must be independent of the sales department, and warehouse custody must be separate from inventory record-keeping. Cash receipts involves mailroom personnel (who prepare a cash prelist), the cashier (who deposits funds), and accounts receivable (who update subsidiary ledgers).
The expenditure cycle manages the acquisition of goods and the disbursement of cash. It relies on a three-way match between the purchase order (what was ordered), the receiving report (what arrived), and the vendor's invoice (what is being charged). In a voucher system, the accounts payable department prepares vouchers that are recorded in a voucher register. Cash disbursements should be made from a treasury function independent of accounts payable. Real-time processing in these cycles allows for immediate inventory updates and better cash management.
Payroll processing involves unique risks, such as "phantom employees." Controls include the use of a separate imprest payroll account, independent paymaster distribution, and the mandatory return of unclaimed checks to internal audit. Time cards (total hours) and job tickets (hours per job) are used to allocate labor and determine pay. Fixed asset procedures manage the non-routine acquisition, maintenance, and disposal of long-term assets. Authorization is centralized, and records must track the physical location, cost, and accumulated depreciation (using depreciation schedules) of all assets.
Conversion, Reporting, and Database Systems
The conversion cycle manages the manufacturing process. It uses a Bill of Materials (BOM) to specify quantities for production and move tickets to track work through the factory. Just-In-Time (JIT) manufacturing aims for zero inventory and zero defects. The Management Reporting System (MRS) uses responsibility accounting to report on cost, profit, and investment centers, focusing on controllable items. Coding schemes like block codes (used in charts of accounts) and mnemonic codes help organize these data.
Database Management Systems (DBMS) solve problems inherent in flat-file systems, such as data redundancy and inconsistency. Data is managed via a Data Definition Language (DDL) and a Data Manipulation Language (DML). Normalization is the process of grouping data attributes into tables to eliminate anomalies (update, insertion, and deletion anomalies). A database is in Third Normal Form (3NF) if it is free of partial and transitive dependencies. Distributed databases can be partitioned (split across sites) or replicated (copied across sites). Concurrency control, often using timestamping, ensures that changes made by one user are reflected for others.
The Resources, Events, and Agents (REA) model is an event-orientation approach to database design. It models economic resources (inventory, cash), economic events (sales, purchases), and economic agents (customers, vendors). Enterprise Resource Planning (ERP) systems integrate these functions across the organization. They utilize On-Line Transaction Processing (OLTP) for daily tasks and On-Line Analytical Processing (OLAP) for complex data analysis, often utilizing a separate data warehouse to prevent transaction processing delays.
IT Governance, Security, and Auditing
IT governance involves the leadership and organizational structures used to ensure that IT supports business strategies. A disaster recovery plan is essential, including off-site storage and backup sites such as a Mutual Aid Pact, an empty shell, or a Recovery Operations Center (ROC). Security is maintained through access controls like passwords, biometrics, and firewalls. Encryption, utilizing both Public Key and Private Key standards, protects data transmissions. The audit trail is preserved in computerized systems through electronic logs.
Auditing in a computer-based environment includes both tests of controls and substantive tests. The auditor evaluates audit risk, which is the product of Inherent Risk, Control Risk, and Detection Risk (). Specialized audit techniques include Black Box (auditing around the computer) and White Box (auditing through the computer). Specific techniques include the Integrated Test Facility (ITF), which processes test transactions alongside live ones, and Parallel Simulation, where the auditor reprocesses production data using a separate program to compare results. Generalized Audit Software (GAS) allows auditors to access and analyze data across various hardware and software environments.