Initial Pages
Initial Pages
Initial Pages
STUDY MATERIAL
PAPER : 7A
INFORMATION TECHNOLOGY
BOARD OF STUDIES
THE INSTITUTE OF CHARTERED ACCOUNTANTS OF INDIA
This study material has been prepared by the faculty of the Board of Studies. The objective of
the study material is to provide teaching material to the students to enable them to obtain
knowledge in the subject. In case students need any clarifications or have any suggestions to
make for further improvement of the material contained herein, they may write to the Director
of Studies.
All care has been taken to provide interpretations and discussions in a manner useful for the
students. However, the study material has not been specifically discussed by the Council of
the Institute or any of its Committees and the views expressed herein may not be taken to
necessarily represent the views of the Council or any of its Committees.
Permission of the Institute is essential for reproduction of any portion of this material.
All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or
transmitted, in any form, or by any means, electronic, mechanical, photocopying, recording, or
otherwise, without prior permission, in writing, from the publisher.
Updated Edition :
July, 2015
Website
www.icai.org
Committee/
Board of Studies
Department
ISBN No.
Price
Published by
Printed by
ii
Chapter 1 introduces the concept of Business Process Management (BPM) and Business
Process Re-Engineering (BPR) in bringing about integration and significant improvement in
business processes. Impact of IT on business processes, its risks and benefits are also
discussed in this chapter. Further, it provides an insight to the different mapping systems like
Entity Diagrams, DFDs, Decision Trees and some more.
Chapter 2 includes the discussion on the relevance of auditing in Business Processes, the
phases of System Development Life Cycle (SDLC) and overview of Information Systems
layers. Overview of latest technological devices and popular computing models and
architectures are also focused here.
Chapter 3 deals with the topics on fundamentals, components and functioning of
Telecommunication systems, different types of networks and their architectures. Afterwards,
the chapter provides an insight on the working of internet and its different technologies.
Chapter 4 comprehensively converses in detail various types of Business Information
Systems at different levels of an organization. Further, the students are also introduced with
some specialized systems like Core Banking system, CRM, ERP, CBS etc. used world wide.
Business reporting through IT and organization roles and importance of access controls are
outlined in this chapter for the sake of clarity of students of the concept.
Chapter 5 highlights various aspects pertaining to business process automation through
application software. Emerging concepts in the field of IT like virtualization, Grid computing,
cloud delivery model etc. are also covered in this chapter.
The significant additions in the revised edition are highlighted in Bold and Italics and have
also been consolidated in the form of table Significant Additions in the Revised Edition in
subsequent page.
In case you need any further clarification/guidance, please send your queries at
[email protected]/ [email protected].
iv
SIGNIFICANT ADDITIONS/MODIFICATIONS IN
2015 EDITION OVER 2014 EDITION
Chapter
no.
Chapter name
Page
numbers
Re-ordering
2.30
5.6.4
Application
Controls
Functions
based
Business
Process
Automation
through
Fig. 5.6.1 Types of Application Controls
Application Software
5.7.1 Virtualization
5.7.2 Grid Computing
5.28
&
5.30 5.31
5.29
5.33 5.35
5.35 5.42
To acquire an insight about various controls during Business Process Automation, latest
technological devices, popular computing models and emerging concepts like
Virtualization, Grid Computing, and Cloud Computing.
vi
A.
1.
Draw up a detailed study plan and allocate time for each topic/chapter of the
subject
2.
Make a study plan covering the entire syllabus and then decide how much time you can
allocate to the subject on daily/weekly basis.
Maintain the time balance amongst various subjects such as purely descriptive type and
numerical-based papers.
First of all, have an overview of the chapter to understand the broad contents and
sequence of various sub-topics.
Do the introspection while going through the chapter and ask various questions to
yourself.
Read each chapter slowly to ensure that you understand and assimilate the main
concept. If need be, read once again with concentration and then try to attempt
questions and exercises given in the Practice Manual.
Recapitulate the main concept after going through each chapter by way of brief notes.
Always assess your preparation periodically, say, on monthly basis. If necessary, revise
your plan and allocate more time for the subject in which you feel deficient.
Preparation of the subject should never be selective in any case. Because broad
coverage of the syllabus is more important than preparing 2-3 chapters exhaustively.
Jot down the key points, in each topic while reading, that would facilitate revision,
especially when you have a limited time of just one day before each examination.
3.
material have to be interlinked with another chapter of the study material and read
together:
Inter - linked
Name of the Chapter(s)
Chapter
No(s).
1
Business Process Management
& IT
2
Information Systems and IT
Fundamentals
5
Business Process Automation
through Application software
2
Information Systems and IT
Fundamentals
5
Business Process Automation
through Application software
3
Telecommunication and Networks
4
Business Information Systems
Inter-linked Topic(s)
Cloud Computing
e-Commerce and m-Commerce
technologies and Payment
Mechanisms
During preparation of the first chapter, students should understand the concepts of
various business processes and their representation through various mapping
systems and how these business processes are impacted by IT. Students should
pay emphasize on bringing a clarity on Business Process Managements principles
and practices and their implementation in a structured manner to have better
understanding of them. Further, students should understand various business
processes flows before representing them with the help of any mapping system.
The third chapter deals with telecommunication and networking concepts which lay
a foundation for a student to comprehend working of Internet, e-commerce and mcommerce. The understanding of these concepts is the hour of need. Students may
draw comparative analysis on different architectures, topologies, transmission
modes after establishing the topic clarity. Also Network Security is the major
concern area, so the chapter provides an overview of different security measures
that can be adopted against network threats, risks and vulnerabilities.
The fourth chapter links the concepts of first three chapters and gives an insight
about different business information systems and their reporting through Information
viii
Technology and different online payment mechanisms. Students will get a fair idea
about different types of Information Systems and their advantages in the real time
world while reading this chapter.
B.
C.
In the last chapter, students should appreciate numerous business applications and
the emerging technologies in the IT field like Cloud Computing, Grid computing etc.
The controls needed in Business Process Automation from an auditors perspective
are dealt here in depth. The content of the chapter has been drafted in a
comprehensive manner to enable the students to prepare in a better way for their
examination.
For the theoretical question, the answer should be laid down in bullets with brief
description given in small paragraphs for making answer more appealing and legible.
Make sure that your handwriting is neat and legible. Answer all parts of a question
one after the other. Do not answer different parts of the same question at different
places.
Plan your time so that equal time is awarded for each mark. Keep sometime for
revision as well.
In case a question leaves room for making an assumption and there is a possibility of
more than one assumption, it is important to clearly state the assumption you have
taken and solve the question accordingly.
Always attempt to do all questions. Remember that six average answers fetch more
marks than five best answers. Therefore, it is important that you must finish each
question within allocated time.
Read the question carefully more than once before starting the answer to understand
very clearly as to what is required by the paper-setter.
Always be concise and write to the point and do not try to fill pages unnecessarily.
Wherever possible, students should try to include relevant diagrams, tables, rough
sketch etc.
Revise your answers carefully and underline important points before leaving the
examination hall.
To conclude
Last but not the least, remember that study will not be an arduous task if it is approached with a
positive attitude and pursued with interest. If you enjoy your study; your learning will be permanent
and profound. Always bear in mind that your own resolution to succeed is more important than any
other. Therefore, give your hundred percent and there will be no looking back.
Best Wishes and Happy Learning!!!
ix
SYLLABUS
Paper - 7A: Information Technology (50 Marks)
Level of Knowledge: Working Knowledge
Objective: To develop understanding of Information Technology as a key enabler and
facilitator of implementing Information Systems in enterprises and their impact on business
processes and controls.
Contents
1.
Business Process Management & IT: Introduction to various Business processes
Accounting, Finances, Sale, Purchase etc. Business Process Automation Benefits & Risks,
Approach to mapping systems: Entity Diagrams, Data Flow Diagrams, Systems Flow
diagrams, Decision Trees/tables, Accounting systems vs. Value chain automation. Information
as a business asset, Impact of IT on business processes. Business Risks of failure of IT,
Business Process Re-engineering
2.
Information Systems and IT Fundamentals: Understand importance of IT in business
and relevance to Audit with case studies. Understand working of computers and networks in
business process automation from business information perspective. Concepts of Computing
(Definition provided by ACM/IEEE and overview of related terminologies). Overview of IS
Layers Applications, DBMS, systems software, hardware, networks & links and people.
Overview of Information Systems life cycle and key phases. Computing Technologies &
Hardware Servers, end points, popular computing architectures, emerging computing
architectures & delivery models example: SaaS, Cloud Computing, Mobile computing, etc.,
Example: Overview of latest devices/technologies i5, Bluetooth, Tablet, Wi-Fi, Android,
Touchpad, iPad, iPod, Laptop, Notebook, Smartphone, Ultra- Mobile PC etc.
3.
Telecommunication and Networks: Fundamentals of telecommunication,
Components and functions of Telecommunication Systems. Data networks types of
architecture, LAN, WAN, Wireless, private and public networks etc., Overview of computing
architectures centralized, de-centralized, mainframe, client-server, thin-thick client etc.
Network Fundamentals Components, Standards and protocols, Network risks & controls
VPN, Encryption, Secure protocols. Network administration and management concepts and
issues. How information systems are facilitated through telecommunications. How Internet
works, Internet architecture, key concepts, risks and controls, e-Commerce and M-commerce
technologies
4.
Business Information Systems : Information Systems and their role in businesses, IT
as a business enabler & driver ERP, Core Banking System, CRM, SCM, HRMS, Payment
Mechanisms. The relationship between organizations, information systems and business
x
xi
xii
CONTENTS
SECTION A: INFORMATION TECHNOLOGY
CHAPTER 1 BUSINESS PROCESS MANAGEMENT & IT
1.1
1.2
1.3
1.4
1.5
1.6
1.7
1.8
1.9
1.10
2.2
2.3
2.4
2.5
2.6
2.7
2.8
2.9
2.10
xiii
3.2
3.3
3.4
3.5
3.6
3.7
3.8
3.9
3.10
3.11
3.12
3.13
3.14
4.2
4.3
4.4
4.5
4.6
4.7
4.8
4.9
4.10
4.11
4.12
4.13
5.2
5.3
5.4
5.5
5.6
5.7
5.8
xv