RISK BASED INFORMATION SYSTEM AUDIT: A LITERATURE REVIEW AND ITS IMPLICATIONS IN ACCOUNTING

Authors

  • MIA ARISTYA PUTRI STUDENT

Keywords:

Audit risk, information system audit, INFORMATION TECHNOLOGY-BASED, INTERNAL CONTROL

Abstract

This study analyzes the concept of Risk Based Information System Auditing (RBISA) and its relevance in the accounting profession. In line with the rapid growth of digital technology and the widespread use of automated accounting systems, organizations require more flexible and risk focused auditing approaches. Based on prior research and recognized frameworks such as COBIT, ITAF, and COSO, this paper evaluates how a risk based audit approach improves the effectiveness, accuracy, and trustworthiness of financial information systems. It explains the fundamental components of RBISA, including risk identification, risk evaluation, control examination, and audit reporting, and discusses its contribution to enhancing internal control systems, increasing audit productivity, and promoting proactive risk mitigation. Additionally, the study addresses the use of technological advancements such as data analytics and automated audit documentation, which enhance audit performance while simultaneously demanding higher technical competencies from auditors. The results indicate that implementing RBISA supports stronger corporate governance, greater financial accountability, and better compliance with regulatory requirements. Overall, this paper emphasizes the necessity of combining risk oriented and technology based auditing strategies in contemporary accounting practices to strengthen organizational accountability and long term resilience.

References

Alzeban, A., & Gwilliam, D. (2014). Factors affecting the internal audit effectiveness: A survey of the Saudi public sector. Journal of International Accounting, Auditing and Taxation, 23(2), 74–86. https://doi.org/10.1016/j.intaccaudtax.2014.06.001

Arena, M., & Azzone, G. (2009). Identifying organizational drivers of internal audit effectiveness. International Journal of Auditing, 13(1), 43–60. https://doi.org/10.1111/j.1099-1123.2008.00392.x

Bierstaker, J., Janvrin, D., & Lowe, D. J. (2014). What factors influence auditors’ use of computer-assisted audit techniques? Advances in Accounting, 30(1), 67–74. https://doi.org/10.1016/j.adiac.2013.12.005

International Federation of Accountants. (2018). International standards on auditing (ISAs). IFAC.

ISACA. (2020). COBIT 2019 framework: Governance and management objectives. ISACA.

Kuhn, J. R., & Sutton, S. G. (2010). Continuous auditing in ERP system environments: The current state and future directions. Journal of Information Systems, 24(1), 91–112. https://doi.org/10.2308/jis.2010.24.1.91

Lenz, R., Sarens, G., & D’Silva, K. (2014). Probing the discriminatory power of characteristics of internal audit functions: Empirical evidence. International Journal of Auditing, 18(2), 126–138. https://doi.org/10.1111/ijau.12016

Moeller, R. R. (2016). Brink’s modern internal auditing: A common body of knowledge (8th ed.). Wiley.

Sari, R. N., & Nugroho, M. (2022). The role of information technology in risk-based auditing: A literature review. Asian Journal of Accounting Research, 7(3), 245–260. https://doi.org/10.1108/AJAR-10-2021-0204

Spraakman, G., O’Grady, W., Askarany, D., & Akroyd, C. (2015). ERP systems and management accounting: New understandings through “nudging” in research. Journal of Accounting & Organizational Change, 11(1), 63–88. https://doi.org/10.1108/JAOC-06-2013-0040

Vasarhelyi, M. A., Alles, M. G., & Kogan, A. (2012). Principles of analytic monitoring for continuous assurance. Journal of Emerging Technologies in Accounting, 9(1), 1–21. https://doi.org/10.2308/jeta-50159

Downloads

Published

2026-03-25

How to Cite

PUTRI, M. A. (2026). RISK BASED INFORMATION SYSTEM AUDIT: A LITERATURE REVIEW AND ITS IMPLICATIONS IN ACCOUNTING . Global Economics and Finance Insights, 1(1), 55–64. Retrieved from https://journal.scholarisglobal.id/index.php/gefi/article/view/19