Territory Stories

February 2008 report to the Legislative Assembly

Details:

Title

February 2008 report to the Legislative Assembly

Collection

Report to the Legislative Assembly; Reports; PublicationNT

Date

2008

Description

Made available via the Publications (Legal Deposit) Act 2004 (NT).

Notes

Date:2008-02

Language

English

Subject

Northern Territory. Auditor-General's Office -- Periodicals; Finance, Public -- Northern Territory -- Accounting -- Periodicals; Northern Territory -- Appropriations and expenditures -- Periodicals

Publisher name

Northern Territory Auditor-General's Office

Place of publication

Darwin

ISSN

1323-7128

Copyright owner

Check within Publication or with content Publisher.

Parent handle

https://hdl.handle.net/10070/223559

Citation address

https://hdl.handle.net/10070/686148

Page content

58 Auditor-General for the Northern Territory February 2008 Report Department of Health and Community Services ASCRIBE IT Controls Audit objectives and scope The objective and scope of the audit was to assess IT controls in relation to the Ascribe pharmacy stock control system, with a particular focus on: IT application controls over the following processes within the Ascribe system: - Inventory tracking - Customer requisitioning - Dispensing - Customer invoicing - Goods ordering - Goods receiving Consideration of the adequacy of interface / validation controls between Ascribe and key external systems; and Consideration of Ascribe IT application level access controls, focussing on where they relate to key application controls identified above (e.g. segregation of duties). The approach was based on: observation and enquiry of appropriate IT and business personnel at Royal Darwin Hospital; identification of potential risks; assessing appropriate documentation; and walkthrough testing of key controls. It should be noted that application controls are reliant on staff exercising these controls and can be compromised by collusion, management override, faulty software and inappropriate security settings.