Understanding IPE (Information Produced by Entity)


How do we test reports generated by system? How to get reliance on these reports? To answer these questions we first need to understand what exactly is IPE, it's flow, risks in each process flow.

Terminologies

Reports generated by System / ERP are termed as IPE, which is a new fancy word for EAE.
IPE Definition
EAE - Definition

IPE incudes information that

IPE incudes information
Example -
Inventory Report,
Accounts Payable report,

Fixed assets roll forward,
Accounts receivable roll forward

Reconciliation of programs moved to production to change board meeting minutes approving those moves

Inventory and sales information that is used as the basis of determining the excess and obsolete reserve amount.


IPE incudes information
Example -
Exception reports,
Log of failed jobs,

Report to changes to payroll data or
Changes to vendor master file,

Log of actions of programmers who have access to production programs that comprise IT applications,

List of new hires,
List of all programs moved to production.


 IPE Examples

What IPE is and what IPE is not. This understanding is very important for an IS Auditor.









IPE Summary


Adarsh Madrecha IPE Summary
IPE Summary

IPE Flow



Steps in creating IPE




Risks in IPE Flow (i.e. IPE generation)







Addressing IPE Risks


Labels: