1

Information Technology Audit Finding Report

Information Technology Audit Report........................................................................1
XYZ College of Engineering.........................................................................................2
Executive Summary....................................................................................................2
Risk Exposure.............................................................................................................2
Scope..........................................................................................................................2
Methodology..............................................................................................................3
Summary of Findings..................................................................................................3
Detailed of Findings....................................................................................................3
Remediation...............................................................................................................4
Timelines and Deliverables........................................................................................4
Appendix.....................................................................................................................5

















2

XYZ College of Engineering
An Enrollment System Audit by Ellinoir Marlon E. Paclibar
Conducted February 16 19 2010
Contact Number: 3330455
Email: lon2xambok@gmail.com

Executive Summary
XYZ College of Engineering is one of the leading colleges in the region. The College, its faculty,
and its administration are known locally and internationally for the excellence of its programs in
engineering education, research, and public service. It is composed of 3 departments with
annual expenditures exceeding 3 million pesos. The College has over 500 employees, 300
faculties, 5,000 undergraduate students, and 200 graduate students.

The College is consistently ranked as a premier institution by its peers in surveys of the nations
engineering school deans. According to an independent statistical survey, its undergraduate
program ranks 2
nd
in terms of quality. Its graduate programs is reputed to be the best as
reported by deans of other institutions.

Risk Exposure
The College has its own internal audit that periodically performs a detailed risk analysis of all
the Colleges auditable entities using factors such as cash inflow, operating expenses, among
others.
The XYZ College of Engineering was determined to be a high risk entity due to the volume of
students it receives annually, arising the issues of handling the schools enrolment data in an
accurate manner.

Scope
Recently, the XYZ College of Engineering deployed an enrolment system recommended by its
Board of Directors. The said enrollment system had been in use since the school year 2007.
The audit covered the period of June 3, 2007 to May 30, 2008.





3

Methodology
Research
Using the internet, I research information about the enrollment system in order to understand
the correct and complete enrolment system. The research identified the common errors of
using and correct usage of the system.

Interview
Meeting were held with two employees in each department of XYZ College of Engineering to
discuss the system, their reactions and the problem they encounter during using enrollment
system. The other purpose of the meeting is to get ideas how they use the system and if they
have knowledge of using the enrollment system.

Questionnaire
To get more ideas how they use the enrollment system I give a questionnaire. The
questionnaire that I used is divided into two. The first part of my questionnaire was designed to
gain ideas how employees use the system. The second part of my questionnaire is how they put
data in the system. I get five employees in each department to answer the questionnaire. After
collecting 10 employees I gave the questionnaires to them and after twenty-four hours I will
collect the questionnaires.

Summary of Findings
According to my observation/findings the enrollment system of XYZ College of Engineering,
they can add records but some cant be added.

Detailed Findings
Question 1: What is your level of understanding in using the enrollment system? According to
their answers eighty percent of the employees understand and have knowledge of using the
enrollment system, and the twenty percent of the employees are moderate and no idea in
using the enrollment system.
Question 2: Did you understand how to add records in enrollment system? Seventy eight
percent of the employees know how add records in enrollment system and the twenty two
percent dont know how to add records.
Question 3: Do you know the correct Syntax of adding records in enrollment sytem? All
respondents answered No. They said that there is no Syntax of adding records in manual of
enrollment system.
Question 4: Is there quality control personnel that check for the inputs? All answered there is
one, but that quality personnel dont stay in XYZ College of Engineering.

4

Remediation
1. Personnel must read and understand the manual of using the enrollment system.
2. Assign a person that have knowledge to the system, and call him if something wrong with the
system.

Timelines and Deliverables
A list of deliverables was given to the XYZ College of Engineering administrator. The auditor expects that
the list will be applied within two months.
After two months, it is recommended that the system be audited again using the same variables. The
recommendation that I gave must be applied before the next semester starts.






















5

Appendix
Questionnaire
1. What is your level of understanding in using the enrollment system?
A. I understand everything
B. Moderate
C. No Idea
2. Did you understand how to add records in enrollment system?
A. Yes
B. No
3. Do you know the correct Syntax of adding records in enrollment sytem?
A. Yes
B. No
4. Is there quality control personnel that check for the inputs?
A. There wasnt any
B. Yes, there is