Why can copying an IPE population into a workpaper template create audit risk?
Copying a source-system population into another file can create a new integrity risk. Rows may be omitted, duplicated, sorted incorrectly, filtered, truncated, or changed during the transfer. If the auditor then selects samples from the copied file, the copied file must be tied back to the original source output.
A better evidence design is usually to preserve the original export, document how it was generated, reconcile the source row count to the delivered file, and control any transformation that is truly necessary. If a template is used only to summarize extraction details, it should reference the preserved source file rather than replace it.
The CIA exam point is that reliability depends on the evidence chain. A neat template is not stronger than a preserved source export unless the template can be reconciled to the source.
Master CIA Part 2 with our CIA Course
45 lessons · 90+ hours· Expert instruction
Related Questions
What should an auditor do if a supervisor weakens a supported finding?
How should auditors prepare for a technical exit meeting?
When should audit quality concerns be escalated beyond the engagement team?
How does business knowledge affect internal audit quality?
Where should an auditor begin a full-company internal control audit?
Related Articles
Join the Discussion
Ask questions and get expert answers.