Information Systems and Technology
The Information Systems and Controls (ISC) discipline on the CPA exam tests your knowledge of the technology infrastructure that supports modern accounting and business operations. CPAs must understand how information systems are designed, deployed, and maintained to evaluate risks and controls effectively.
System Architecture
Information systems architecture defines how hardware, software, data, and network components interact. Key concepts include:
- Client-server architecture: A model where client devices request services from centralized servers. Common in enterprise accounting systems where multiple users access a shared database.
- Three-tier architecture: Separates presentation (user interface), application logic (business rules), and data storage layers. This separation improves security, scalability, and maintainability.
- Service-oriented architecture (SOA): Applications are composed of loosely coupled services that communicate via standardized protocols, enabling flexibility and reuse.
- Microservices: An evolution of SOA where applications are broken into small, independently deployable services, each responsible for a specific business function.
Cloud Computing
Cloud computing delivers computing resources over the internet. CPAs must understand the service and deployment models:
| Service Model | What is Provided | Customer Manages | Example |
|---|---|---|---|
| IaaS | Infrastructure (servers, storage, networking) | OS, applications, data | AWS EC2, Azure VMs |
| PaaS | Platform (runtime, middleware, OS) | Applications, data | Google App Engine, Heroku |
| SaaS | Complete application | Data and user configuration | QuickBooks Online, Salesforce |
Deployment models include public cloud (shared infrastructure), private cloud (dedicated to one organization), hybrid cloud (combination), and community cloud (shared among organizations with common needs).
Database Concepts
Databases are central to accounting information systems. Key concepts for the CPA exam:
- Relational databases: Organize data in tables with rows and columns. Tables are linked through primary keys and foreign keys. SQL (Structured Query Language) is used for querying.
- Entity-relationship (E-R) diagrams: Model data structures by showing entities, attributes, and relationships. Used in system design and documentation.
- Normalization: The process of organizing data to reduce redundancy. First normal form (1NF) eliminates repeating groups; second normal form (2NF) removes partial dependencies; third normal form (3NF) removes transitive dependencies.
- Data warehouses: Centralized repositories that store historical data from multiple sources for analysis and reporting. Support OLAP (Online Analytical Processing) as opposed to OLTP (Online Transaction Processing).
Networking Fundamentals
Understanding network concepts is important for evaluating IT controls:
- LAN, WAN, VPN: Local area networks connect devices within a building; wide area networks span geographic regions; virtual private networks create encrypted tunnels over public networks.
- TCP/IP protocol stack: The foundational communication protocol for the internet, consisting of application, transport, internet, and network access layers.
- Firewalls: Network security devices that monitor and filter traffic based on predefined rules. May be hardware-based, software-based, or both.
- Wireless security: WPA3 is the current standard for wireless network encryption. CPAs should understand the risks of unsecured wireless access points.
Emerging Technologies
CPAs must stay current with technologies that affect accounting and auditing:
- Blockchain: A distributed ledger technology that records transactions in immutable, linked blocks. Has implications for audit trail integrity, smart contracts, and cryptocurrency accounting.
- Artificial intelligence and machine learning: Used in fraud detection, predictive analytics, automated journal entry testing, and natural language processing for contract analysis.
- Robotic process automation (RPA): Software robots that automate repetitive, rule-based tasks such as data entry, reconciliations, and report generation.
- Internet of Things (IoT): Network of connected devices that generate data. Creates new data sources for analytics but also introduces security risks.
Build your IT knowledge with CPA flashcards and practice exams. Start free to access all ISC study materials.