Department

School of Accountancy

Document Type

Article

Publication Date

6-2011

Embargo Period

7-3-2018

Abstract

This exploratory study examines the role of the audit committee in overseeing information technology (IT) risk. We address the degree of audit committee oversight of specific IT risks, as well as factors associated with variations in audit committee IT oversight. Based on responses from 39 audit committee members, we found (1) little audit committee emphasis on oversight of IT risks, (2) audit committees involved with IT oversight focus on more traditional risks (e.g., monitoring), while very little attention is devoted to IT acquisition and implementation, and (3) the amount of IT oversight is positively associated with the responding members auditing experience and prior familiarity with the COBIT model for assessing IT risks. Audit committee independence, diligence, and expertise, company size, and industry were not significantly associated with IT oversight.

Journal

Review of Business Information Systems

Journal ISSN

1534-665X

Volume

7

Issue

4

Digital Object Identifier (DOI)

10.19030/rbis.v7i4.4509

Share

COinS