Ais CH 3
Ais CH 3
They may need to evaluate the strengths and weaknesses of an entity’s internal controls.
How it flows
Where it goes
2. Flowcharts
Include three types:
a. Document flowchart, a graphical description of the flow of documents and information
between departments or areas of responsibility within an organization.
b. System flowchart, a graphical description of the relationship among the input, processing,
and output in an information system.
c. Program flowchart, a graphical description of the sequence of logical operations that a
computer performs as it executes a program.
These four symbols are combined to show how data are processed.
1. Data sources and destinations
A source or destination symbol on the DFD represents an organization or individual that sends or
receives data that the system uses or produces. Data sources and data destinations are represented
by squares.
An entity/item can be both a source and a destination
2. Data flows
Appear as arrows
Represent the flow of data between sources and destinations, processes, and data stores.
3. Processes
Appear as circles
4. Data stores
Represent a temporary or permanent repository of data. DFDs do not show the physical
storage medium (such as disks and paper) used to store the data. As with the other DFDs
elements, data store names should be descriptive.
Subdividing the DFD
DFDs are subdivided into successively lower levels to provide increasing amounts of detail,
because few systems can be fully diagrammed on one sheet of paper. Users have needs, so a
variety of levels can better satisfy these requirements.
The highest level DFD is called a context diagram. A context diagram provides the reader with a
summary-level view of the system. It depicts a data processing system and the external entities that
are: the sources and destinations of the system`s inputs and outputs.
Guidelines for Drawing a DFD
• RULE 1: Understand the system: To understand how the system works, observe the flow of
information through an organization and interview the individuals who use and process the data.
• RULE 2: Ignore control processes and control actions (e.g., error corrections). Only very critical
error paths should be included.
(2) Processing symbols: either show what type of device is used to process data or indicate when
processing is performed manually.
(3) Storage symbols: represent the device used to store data that the system is not currently using.
(4) Flow and miscellaneous symbols: indicate the flow of data and goods. They also represent
such operations as where flowcharts begin or end, where decisions are made, and when to
add explanatory note to flowcharts.
A, DOCUMENT FLOWCHARTS
A document flowchart illustrates the flow of documents and information among areas of responsibility
within an organization. A document flowchart is used to depict the elements of a manual system,
including accounting records (documents, journals, ledgers, and files), organizational departments
involved in the process, and activities (both clerical and physical) that are performed in the departments.
Document flowcharts trace a document from its cradle to its grave. They show where each document
originates, its distribution, the purpose for which it is used, its ultimate disposition, and everything that
happens as it flows through the system.
Internal control flowcharts are document flowcharts used to evaluate the adequacy of
internal controls, such as segregation of duties or internal checks.
They can reveal weaknesses or inefficiencies such as:
• Inadequate communication flows
• Unnecessarily complex document flows
• Procedures that cause wasteful delays
Document flowcharts are also prepared in the system design process.
GUIDELINES FOR PREPARING FLOWCHARTS
Let’s step through some guidelines for preparing flowcharts:
1. Understand a system before flowcharting it. Interview users, developers, auditors, and
management, or have them complete a questionnaire. Read through a narrative description of
the system, or walk through systems transactions.
2. Identify the entities to be flowcharted, such as departments, job functions, or external parties
(the parties who ― do‖ things in the story). Identify documents or information flows in the
system, as well as the activities or processes performed on the data.
Compiled by Benol.M Page 8
CHAPTER THREE
SYSTEM DEVELOPMENT AND DOCUMENTATION TECHNIQUES
(For example, when reading a description of the system, the preparer could draw a box around
the entities, a circle around the documents, and a line under the activities.)
3. Use separate columns for the activity of each entity.
• Example: If there are three different departments or functions that ― do‖ things in
the narrative, there would be three columns on the flowchart.
4. Flowchart only the normal course of operations, and identify exceptions with
annotations.
5. As much as possible, the flow should go from top to bottom and left to right.
2. Use the standard flowcharting symbols, and draw them with a template or a computer.
3. Clearly label all symbols. Write a description of the input, process, or output inside the
symbol. If the description will not fit, use the annotation symbol. Print neatly, rather than
writing in cursive.
Use annotations if necessary to provide adequate explanation.
– Give the flowchart a clear beginning and ending.
– Show where each document originated and its final disposition.
– One approach you can use is to read through the narrative and for each step define:
– What was (were) the input(s)
– What process was carried out
– What was (were) the output(s)
– Note on the next slide that the flow sequence is input -- process – output.
– Every manual process should have at least one input and at least one output.
Show all data entered into or retrieved from a computer file as passing through a processing operation (a
computer program) first.
– Do not show process symbols for:
1. Forwarding a document to another entity
2. Filing a document
– Do not connect two documents except when forwarding to another column.
• When a document is forwarded, show it in both locations.
– When using multiple copies of a document, place document numbers in the upper,
right- hand corner.
– Show on-page connectors and label them clearly to avoid excess flow lines.
– Use off-page connectors if the flow goes to another page.
– If a flowchart takes more than one page, label the pages as 1 of 5, 2 of 5, 3 of 5, etc.
– Show documents or reports first in the column where they are
created. Start with a rough draft; then
18. Redesign the flowchart to avoid clutter and a large number of crossed lines.
19. Verify the flowchart`s accuracy by reviewing it with the people familiar with the system.
Be sure all uses of flowcharting conventions are consistent.
20. Draw a final copy of the flowchart. Place the name of the flowchart, the date, and the
preparer’ s name on each page of the final copy.
System flowcharts also describe the type of media being used in the system, such as magnetic tape,
magnetic disks, and terminals.
A system flowchart begins by identifying the inputs that enter the system and their origins. The input can
be new data entering the system, data stored for future use, or both. The input is followed by the
processing portion of the flowchart, i.e., the steps performed on the data. The logic the computer use(s) to
perform the processing task is shown a program flowchart. The resulting new information is the output
component, which can be stored for later use, displayed on a screen, or printed on paper. In many
instances, the output from one process is an input to another. In other words, it’ s the same basic input –
process – output pattern that we saw in the document flowchart.
System flowcharts are an important system analysis, design, and evaluation tool. They are universally
employed in systems work and provide an immediate form of communication among workers.
The system flowchart is an excellent vehicle for describing information flows and procedures within
AIS.
C. PROGRAM FLOWCHARTS
Program flowcharts illustrate the sequence of logical operations performed by a computer in executing a
program. A program flowchart describes the specific logic to perform a process shown on a system
flowchart. They also follow an input – process – output pattern. Once designed and approved, the
program flowchart serves as the blueprint for coding the computer program.
FLOWCHARTS versus DFDs
Now that we’ve examined both flowcharts and DFDs, it may be useful to discuss the
differences again.
DFDs place a heavy emphasis on the logical aspects of a system.
For example, the registrar’s office of a small college receives paper enrollment forms from students. They
sort these records alphabetically and then update the student record file to show the new classes. They also
prepare class lists from the same data. The sorted enrollment forms are forwarded to the bursar’s office for
billing purposes. Class lists are mailed to faculty members.
Developing quality, error-free software is a difficult, expensive, and time-consuming task. In fact, it is
almost always the cases that software development projects deliver less than one expects and take more
time and money to develop than one expects. To make matters worse, most companies that want to
implement a new system want it immediately. As developers feel the pressure to perform system
miracles, they begin skipping systems development steps and just start writing code. Omitting basic
systems development steps only leads to disaster, as developers create well-structured systems that fail to
meet user needs or solve any of their business problems.
For example, a KPMG survey found that 35% of all major information systems projects were classified as
runaways hopelessly incomplete and over budget.
Major cause of runaways: Skipping or skimping on systems development processes. Runaways can
consume a great deal of time and money and in the end produce no usable results.
Systems Development
Whether systems changes are major or minor, most companies go through a systems development life
cycle. The steps in that cycle and the people involved in systems development are discussed in this
section.
The Systems Development Life Cycle (SDLC)
1) Systems analysis
As organizations grow and change, management and employees recognize the need for more or better
information and request a new or improved information system. The first step in systems development is
systems analysis. When a new or improved system is needed, a written request for systems
development is prepared. The request describes:
The current system’s problems.
The reasons for the proposed changes.
The proposed systems goals and objectives, as well as its anticipated benefits and costs.
The project development team conducts the analysis. The five steps in system analysis phases include:
(1) Initial investigation: Involves gathering the information needed to buy/purchase or develop a new
system and determining whether it is a priority. An initial investigation is conducted to screen projects.
The person conducting an initial investigation must:
Gain a clear picture of the problem or need
1. Ask users what they need: Though this is the simplest and fastest strategy, many people do not
realize or understand their true needs. Although they may know how to do their jobs, they may not
be able to break them down into the individual information elements they use. It is sometimes better
to ask users questions pertaining to what decisions they make and what processes they are involved
in and then help them design systems to address their answers. Users must think beyond their current
information needs so that new systems do not simply replicate the current information in new and
improved formats.
2. Analyze existing systems: Both internal and external systems should be analyzed. A partial solution
may already exist, thus eliminating the problem of reinventing the wheel.
3. Examine existing system use: This strategy differs from the previous one by taking into account
that certain modules may not be used as intended, may be augmented by manual tasks, or may be
avoided altogether. This approach helps determine if a system can be modified or must be replaced.
i. Output design: The objective of output design is to determine the nature, format, content, and timing
of printed reports, documents, and screen displays. Tailoring the output to user needs requires
cooperation between users and designers.
Outputs usually fit into one of the following four categories:
Scheduled reports: Have a pre-specified content and format and are prepared on a regular
basis. Examples include monthly performance reports, weekly sales analyses, and annual
financial statements.
Special-purpose analysis reports: Have no pre-specified content and format and are not on a
regular schedule. They are prepared in response to a management request to evaluate an issue,
such as which of three new products would provide the highest profits. Example: Analysis of
impact of a government mandate on profitability
Triggered exception reports: Have pre-specified content and format but are prepared only in
response to abnormal conditions. Excessive absenteeism, cost overruns, inventory shortages,
and situations requiring immediate corrective action trigger such reports.
Demand reports: Have a pre-specified content and format but are prepared only on request.
Both triggered exception reports and demand reports can be used effectively to facilitate the
management process.
ii. File and database design
iii. Input design
iv. Program design
v. Procedures design
vi. Controls design
Direct conversion immediately terminates the old AIS when the new one is introduced. Direct
conversation is appropriate when the old AIS has no value or the new one is so different that comparisons
between the two are meaningless. The approach is inexpensive, but it provides no backup AIS. Unless a
system has been carefully developed and tested, therefore, direct conversation carries a high risk of
failure.
Parallel conversion operates the old and new systems simultaneously for a period of time.
– You can process transactions with both systems, compare output, reconcile differences, and make
corrections to the new AIS.
– Parallel processing protects the company from errors, but it is costly and stressful for employees to
process all transactions twice. However, because companies often experience problems during
conversion, parallel processing has gained widespread popularity.
Phase-in conversion gradually replaces elements of the old AIS with the new one.
– The new system is often phased in a module at a time.
These gradual changes mean that data processing resources can be acquired over time. The
disadvantages are the cost of creating the temporary interfaces between the old and the new AIS and
the time required to make the gradual changeover (complete conversion).
Pilot conversion implements a system in just one part of the organization, such as a branch office or a
single store. When problems with the system are resolved, the new system could be implemented at the
remaining locations. This approach localizes conversion problems and allows training in a live
environment. The disadvantages are the long conversion time and the need for interfaces between the old
and the new systems, which coexist until all locations have been converted.
Implementation and conversation constitute the capstone phase during which all the elements and
activities of the system come together. Because of the complexity and importance of this phase, an
implementation and conversion plan is developed and followed. As part of implementation, any new
hardware and software is installed and tested. New employees may need to be hired and trained, or
existing employees relocated. New processing procedures must be tested and perhaps modified. Standards
and controls for the new system must be established and system documentation completed. The
Compiled by Benol.M Page 19
CHAPTER THREE
SYSTEM DEVELOPMENT AND DOCUMENTATION TECHNIQUES
organization must convert to the new system and dismantle the old one. After the system is up and
running, any fine-tuning adjustments needed are made and a post-implementation review is conducted to
detect and correct any design deficiencies. The final step in this phase is to deliver the operational system
to the organization, at which time the development of the new system is complete. A final report is
prepared and sent to the information systems steering committee.
5) Operation and maintenance
The final step in the SDLC is to operate and maintain the new system. Once the system is up and
running, operations and monitoring continue.
• Tasks include:
– Fine-tune/adjust and do post-implementation review.
– Operate the system.
– Periodically, review and modify the system.
– Do ongoing maintenance.
– Deliver improved system.
Eventually, a major modification or system replacement is necessary and the SDLC begins again.
In addition to these five phases, three activities (planning, managing the behavioral reactions to
change, and assessing the ongoing feasibility of the project) are performed throughout the life cycle.
THE PLAYERS
Many people are involved in developing and successfully implementing AIS, including:
a) Top management: One of the most effective ways to generate systems development support is a clear
signal from top management that user involvement is important. With respect to systems development,
top management’s most important roles are:
Providing support and encouragement for development projects and aligning
information systems with corporate strategies.
Establishing system goals and objectives.
b) Accountants
Accountants may play three roles during systems design:
– First, as AIS users, they must determine their information needs and system requirements
and communicate them to system developers.
– Second, as members of a project development teams or information systems steering
committee, they help manage systems development.
– Third, accountants should take an active role in designing system controls and periodically
monitoring and testing the system to verify that the controls are implemented and
functioning properly. All systems should contain sufficient controls to ensure the accurate
and complete processing of data. The system also should be easy to audit. If addressed at
the start of development, auditability and control concerns can be minimized. Trying to
achieve them after a system has been designed is inefficient, time-consuming, and costly.
c) Information systems steering committee
Because AIS development spans functional and divisional boundaries, organizations usually establish
an executive-level information systems steering committee to plan and oversee the information system
function. The committee often consists of high-level management people, such as the controller and
the systems and user-department management. The steering committee sets policies that govern the
AIS and ensures top-management participation, guidance, and control. The steering committee also
facilitates the coordination and integration of information systems activities to increase goal
congruence and reduce goal conflict.
d) Project development team
Each development project has a team of systems specialists, managers, accountants and auditors, and
users that guides development. Team members plan each project, monitor it to ensure timely and cost-
effective completion, make sure proper consideration is given to human element, and communicate
project status to top management and the steering committee. They should communicate frequently
with users and hold regular meetings to consider ideas and discuss progress so there are no surprises
upon project completion. A team approach usually produces more effective results and facilitates user
acceptance of the implemented system.
Many people outside an organization play a role in systems development, including customers, vendors,
auditors, and governmental entities. Their needs must also be met in systems development.