ENTERPRISE CRM: THE EVOLVE CPA AUDIT AND INTERNAL CONTROLS

Abstract

Ellen Brooke is an internal auditor facing an important decision regarding the internal auditing controls of her firm. Her company uses the Enterprise CRM software systems to manage and store the data of her company in the cloud. Ellen believes this system poses a risk for her firm. The case reviews the information systems security concern introduced by the continued use of the Enterprise CRM system. The product is widely used in industry, and apparently accepted as a secure system. However, she has attended a presentation regarding the threats associated with the product. The audit control risks she has recognized are based on the data presented by a consultant who is a technical expert on the Enterprise CRM system. The threat he has discovered and documented violate the new standards of the Evole accounting control standards in her opinion. The case provides a brief overview of the Evolve accounting and attestation standards, and Enterprise CRM products and security features. The case summarizes and explores the employee's decision concerns and situation. The decision faced by the employee presents the employee with a decision about her reporting alternatives, and audit responsibility to the firm and to her professional accounting standards.