How do we test reports generated by system? How to get reliance on these reports? To answer these questions we first need to understand what exactly is IPE, it's flow, risks in each process flow.
Terminologies
Reports generated by System / ERP are termed as IPE, which is a new fancy word for EAE.
 |
| IPE Definition |
 |
| EAE - Definition |
IPE incudes information that
Inventory Report,
Accounts Payable report,
Fixed assets roll forward,
Accounts receivable roll forward
Reconciliation of programs moved to production to change board meeting minutes approving those moves
Inventory and sales information that is used as the basis of determining the excess and obsolete reserve amount.
Example -
Exception reports,
Log of failed jobs,
Report to changes to payroll data or
Changes to vendor master file,
Log of actions of programmers who have access to production programs that comprise IT applications,
List of new hires,
List of all programs moved to production.
IPE Examples
What IPE is and what IPE is not. This understanding is very important for an IS Auditor.
IPE Summary
 |
| IPE Summary |
IPE Flow
Steps in creating IPE
Risks in IPE Flow (i.e. IPE generation)
Addressing IPE Risks
