How do we test reports generated by system? How to get reliance on these reports? To answer these questions we first need to understand what exactly is IPE, it's flow, risks in each process flow.
Reports generated by System / ERP are termed as IPE, which is a new fancy word for EAE.
|EAE - Definition|
IPE incudes information that
Accounts Payable report,
Fixed assets roll forward,
Accounts receivable roll forward
Reconciliation of programs moved to production to change board meeting minutes approving those moves
Inventory and sales information that is used as the basis of determining the excess and obsolete reserve amount.
Log of failed jobs,
Report to changes to payroll data or
Changes to vendor master file,
Log of actions of programmers who have access to production programs that comprise IT applications,
List of new hires,
List of all programs moved to production.
What IPE is and what IPE is not. This understanding is very important for an IS Auditor.
Steps in creating IPE
Risks in IPE Flow (i.e. IPE generation)
Addressing IPE Risks