A Model of Control and Audit Procedure Change in Evolving Data Processing Systems.
为审计师提供了一个模型，帮助他们在系统变更时识别需要修改控制点和审计程序的位置，仅需关注系统级结构变更引发子系统级结构变更的部分。
Abstract ABSTRACT: The data processing systems that auditors examine and evaluate are modified frequently, Somehow they must decide what effect changes to a system may have on the controls needed to ensure the system is reliable and on the audit procedures used to determine whether controls are in place and working. This paper provides a model that allows auditors to structure their search space so they can identify those system locations where controls and audit procedures must be modified when system changes occur. The model shows that auditors need examine only those parts of a system where structural changes made at the system level induce structural changes at the subsystem level. A formalism is provided for tracing the propagation of change through the various levels of subsystems.