Para 3.22.53 — MSO (Audit)
Original Rule Text
3.22.53 Application Control requirements may be divided into the following:
(i) Documentation standards
(ii) Input controls
(iii) Processing controls
(iv) Output controls
(v) Master/Standing Data File controls
(vi) Audit requirements
# Documentation Standards
What This Means
Application controls can be divided into six categories: documentation standards (ensuring system documentation exists and is current), input controls (ensuring data entered is accurate and authorised), processing controls (ensuring transactions are processed correctly), output controls (ensuring results are complete and properly distributed), master/standing data file controls (protecting reference data integrity), and audit requirements (ensuring the system can be audited effectively).
This explanation was generated with AI assistance for educational purposes. Always refer to the official gazette notification for authoritative text.
Key Points
- 1Application controls are divided into six distinct categories
- 2Documentation standards ensure adequate and up-to-date system documentation
- 3Input controls ensure data accuracy, authorisation, and completeness at entry
- 4Processing controls ensure correct and complete transaction processing
- 5Output controls ensure results are accurate, complete, and properly distributed
- 6Master/standing data controls and audit requirements complete the framework
Practical Example
When auditing a government payroll application, the auditor systematically checks all six categories. Documentation: Is the system manual current? Input: Are new employee additions authorised by the establishment section? Processing: Does the system correctly calculate DA, HRA, and deductions? Output: Are pay slips distributed only to the correct employees? Master data: Are changes to the pay scale master file authorised and logged? Audit: Can a transaction be traced from the pay slip back to the original input?
This explanation was generated with AI assistance for educational purposes. Always refer to the official gazette notification for authoritative text.
Frequently Asked Questions
Why are application controls divided into these specific categories?▼
Which category of application control is most critical?▼
This explanation was generated with AI assistance for educational purposes. Always refer to the official gazette notification for authoritative text.