EDI : the control, audit, and legal issues

Abstract

EDI, or Electronic Data Interchange is the computer-to-computer transfer of business information in a standard format between trading partners. It is becoming the fastest growing method of exchanging information and payments between companies. This method of paperless trading have a dramatic impact on the way companies, whether large or small, conduct their businesses. TradeNet is the first nation-wide EDI system implemented in Singapore. The government is continuing to promote the use of EDI by introducing PortNet, Law Net, MediNet, GraphNet and so forth. As the use of EDI becomes more widespread, the concern over the audit, control and legal issues of EDI begins to arise. With the implementation of EDI, there are threats faced by the users. As such, the objective of the project is to understand the adequacy of the audit and control issues of using EDI in Singapore. The legal issues of EDI are also discussed to complete the study on EDI. Furthermore, various costs and benefits associated with the use of EDI are also discussed. The evolution of EDI can be evaluated by examining the development of the exchange of business data over the years. The two basic EDI networks by which data are transmitted are namely the point-to-point network and the third-party network. By conducting business electronically through computer-to-computer, businesses are exposed to new control, security and legal issues. Some control methods can be adopted to limit these exposures. In accordance with the recommendation of the EDI Council of Australia and the EDP Auditors Association, this project classifies the various control methods into physical controls, logical controls, application controls, transmission controls and authentication controls. The legal aspects of EDI is also discussed in this project. Case studies on TradeNet and a number of local users who have successfully implemented EDI are conducted. The authors have recognised the increased importance of EDI as Singapore moves towards globalisation.