Federal Agencies Still Need To Develop Greater Computer Audit Capabilities

A growing reliance on computers, coupled with increasing cost, requires that Federal managers assure themselves that computers support management goals and objectives, operate efficiently and economically, and encompass adequate controls to prevent errors, fraud, waste, and abuse. Internal auditing is an important management tool to help provide such assurance. GAO conducted a review to evaluate the progress of Federal internal audit organizations and provided guidance for agencies in establishing proper computer audit coverage.

Some of the 19 Federal audit organizations which GAO reviewed cannot be sure that they have adequately identified their agencies' computer audit needs. GAO found that nine organizations had limited, outdated, or no inventories of their agencies' computer systems to aid in planning audit coverage. GAO also found that many organizations have not developed and maintained the skilled staff necessary to meet computer audit responsibilities for their agencies. Six organizations had little or no computer audit capabilities at the time of the review. Although GAO found examples of effective computer auditing, insufficient computer audit capabilities generally resulted in only limited compliance with the standards issued by GAO for auditing computer-based systems. Some organizations were hindered in acquiring computer audit staff because of personnel ceilings, Federal hiring restrictions, and a lack of management support for computer auditing. GAO also found that many organizations did not have formal training programs to help develop computer audit skills. Despite an increased emphasis on the need for proper computer-related controls, GAO found little overall direction, other than the GAO audit standards, requiring Federal internal audit organizations to specifically evaluate computer-related controls. Such evaluations could help minimize error, fraud, waste, and abuse, but are also necessary if Government auditors are to fulfill their professional audit responsibilities.

Recommendations

Our recommendations from this work are listed below with a Contact for more information. Status will change from "In process" to "Open," "Closed - implemented," or "Closed - not implemented" based on our follow up work.

Director: Walter L. Anderson Team: General Accounting Office: Accounting and Financial Management Division Phone: (202) 275-5044