Southern New Hampshire University

ACC-676: Audit of Accounting Information Systems

A study guide to SNHU's ACC-676, a graduate course in the information systems and controls pathway of its CPA certificate.

Updated October 2026 · 5 min read

ACC-676 Audit of Accounting Information Systems is a graduate course at Southern New Hampshire University.

SNHU lists it in the information systems and controls pathway of its CPA certificate, alongside ACC-640 Auditing, ACC-677 Information System Assurance and Advising and ACC-705 Advanced Topics in Information Systems and Controls. That pathway mirrors the Information Systems and Controls (ISC) discipline of the CPA exam introduced in 2024.

SNHU does not publish a detailed public description of ACC-676, so check your syllabus for its exact outcomes.

As its title signals, the course focuses on auditing the systems that capture, process and report accounting data. The hard part for most students is joining two worlds: the audit logic of risks, assertions and evidence, and the technical reality of databases, user access and interfaces.

Course at a Glance

ItemDetails
UniversitySouthern New Hampshire University (SNHU)
Course codeACC-676
LevelGraduate
ProgramCPA certificate, information systems and controls pathway
Subject areaInformation systems auditing
Typical workIT audit plans, control testing, analytics on system data, findings memos (confirm in your syllabus)

What an Accounting Information Systems Audit Course Typically Covers

TopicTypical content
Planning an IT auditUnderstanding systems, data flows and IT risks relevant to reporting
IT general controlsAccess, change management, operations, backup and recovery
Application controlsInput, processing and output controls within business cycles
Data analytics in auditTesting full populations for anomalies, duplicates and exceptions
Service organizationsUsing SOC 1 reports when a client outsources processing

Key Concepts Explained

Testing User Access

Access testing checks that only authorized people can perform sensitive actions and that leavers lose access promptly. Auditors compare system user lists with HR records and approved role definitions.

Example: An auditor matches the ERP user list (420 accounts) against HR's leavers report for the year. Six accounts belong to people who left; two of them logged in after their leaving date. That finding prompts a review of what those accounts did and a recommendation to link HR exits to automatic account disabling.

Using Data Analytics

Instead of sampling, auditors can test every transaction for certain risks: duplicate invoice numbers, payments on weekends, journal entries posted by unusual users or just below approval limits.

SOC 1 Reports

When a client uses a payroll provider or cloud system, the auditor may rely on a SOC 1 report describing the provider's controls. A Type 2 report also tests whether those controls operated effectively over a period, and the auditor must check the complementary controls the client is expected to operate.

Typical Assignments and How to Approach Them

Assignment typeWhat it testsHow to approach it
IT audit planScoping risks and systemsLink each system to the accounts and assertions it affects
Controls testingDesigning and evaluating testsSpecify population, method and what counts as an exception
Analytics exerciseTesting full data setsState the risk, the test logic and how you followed up exceptions
Findings memoReporting to managementCondition, criteria, cause, effect, recommendation

Auditing Systems Cycle by Cycle

A practical way to approach an accounting information systems audit is to work through the business cycles: revenue, purchasing, payroll, inventory and financial close. For each cycle, identify the system used, the key data flows, the risks to reporting and the controls, both automated and manual, that address them.

The revenue cycle, for instance, might involve an order system, a warehouse system and the general ledger. Risks include orders shipped without credit approval, invoices not matched to shipments and interfaces dropping transactions.

Tests could include reviewing configured credit limits, reperforming an invoice-to-shipment match on a sample and reconciling interface totals between systems.

Example: Daily sales in the order system total $2,431,500, but the batch posted to the ledger totals $2,418,200. The $13,300 difference traces to three orders rejected by the interface because of an invalid customer code. The finding: no one reviews interface error reports daily.

Where Students Get Stuck

Study Tips for ACC-676

How We Help with ACC-676

Send the case, data, rubric and any feedback. A writer with IT audit knowledge can prepare a worked audit plan or findings memo, explain tests and evidence, or review your draft. See our accounting assignment help guide for other modules.

GradeEssays is independent of Southern New Hampshire University. Our models are study aids: use them to understand the approach, then complete and submit your own work under SNHU's academic integrity policy. Every order is written from scratch with free revisions within the scope of your original request.

Get a Clear ACC-676 Model

Share the case and feedback. We prepare a worked IT audit plan or memo you can learn from.

Start My ACC-676 Help

Free revisions · Full refund if late · Written from scratch for your order

Frequently Asked Questions

Which program includes ACC-676?

SNHU lists it in the information systems and controls pathway of its CPA certificate.

How is ACC-676 different from ACC-675?

Both deal with information systems and controls. ACC-676, as its title says, centers on auditing accounting information systems; check each syllabus for the exact scope.

Does ACC-676 help with the CPA exam?

SNHU's pathway mirrors the ISC discipline of the CPA exam, but the course is not an exam review. Use official CPA review materials too.

What is a SOC 1 report?

A report on a service organization's controls relevant to its clients' financial reporting. Type 2 reports also test operating effectiveness over a period.

Do I need coding skills?

Not usually for accounting IT audit courses, but comfort with spreadsheets and data is helpful. Follow your syllabus.

Can you review my findings memo?

Yes. Send it with the case; we check structure, logic and clarity.