142
General controls relate to all EDP activities and include:
A plan of organization and operation of the EDP function.
Procedures for documenting, reviewing, testing, and approving systems or
Applications controls relate to specific tasks performed by the EDP department,
such as preparing payroll. These controls are intended to provide assurance that
the recording, processing, and reporting of data are properly performed.
Applications controls can be further divided into “input,” “processing,” and
“output” controls.
Input controls ensure that input data is authorized, converted into machine–
sensible form, verified, and not lost, duplicated, or altered.
Processing controls provide assurance that transactions are processed, as
authorized, and that none were added or omitted.
Output controls ensure that output data are accurate and received only by
authorized personnel.
In Lakeside‘s situation, specific controls would include the following:
– All programs should be purchased from reputable software firms or written by
employees with an appropriate background in software development. The
– Proper documentation should be furnished with all programs to indicate the
controls that have been established within the various functions. This
– Testing of all programs should be performed before the client relies on them.
For a time, as an example, the company may want to run parallel processing
where all functions are carried out both manually as well as through the new