Continuous Auditing as Improvement of ACL Functionalities

Abstract

ACL (Audit Command Language) is a software application for data analysis. It is used to analyze large quantities of data (e. g. the whole population and not just a sample).The use of ACL saves time, increases the quality and the reliability of the audit work done. The purpose of this paper is to show how the ACL functions, and how can be made steps towards continuous auditing. The functionalities that are offered by ACL enable the user to analyze large quantities of data (the whole population), automatic marking of work (commands) and the respective results. There are even higher added value such as continuous auditing, the ability of users (e. g. auditors) to make analyses of data directly on the production databases (Oracle and many more), which lead to independence from the IT department and many more advantages.The purpose is to show also the weaknesses and the risks when using ACL for the continuous auditing process. It is mentioned what activities an organization has to perform in order to increase advantages of ACL and to lower the risks to an acceptable level.