The Role of Internal Auditors in Reducing Audit Risks Associated with Electronic Accounting Information Systems in Libya

This study investigates whether internal auditors in Libyan oil companies possess the necessary competence and capabilities in the security of electronic accounting information systems within an era of transition from manual auditing to electronic accounting information system auditing. The study also examines the issue of whether internal auditors implement sufficient safeguards to address the risks associated with electronic accounting information systems. A questionnaire survey adopted for data collection revealed that: internal auditors in the sampled companies possess a high level of competence and efficiency in electronic accounting information system security; and that they also follow all protective measures to counter the risks of electronic accounting information systems. However, descriptive statistics show that the mean scores of participants' responses regarding the competence and efficiency of internal auditors in electronic accounting information system security were lower than the overall mean of the axis. This could be seen as a deficiency on the part of internal auditors in reviewing risks related to electronic accounting information systems, monitoring management's implementation of regular maintenance of electronic systems, ensuring the existence of sufficient protection programs to scan electronic programs or magnetic disks, implementing procedures to limit risks arising from electronic equipment damage, and periodically evaluating information security applications within the company. Descriptive statistics also indicate that the average scores of participants' responses regarding internal auditors' adherence to all protective measures to counter the risks of electronic accounting information systems were lower than the overall mean of the axis. This could be seen as a deficiency on the part of internal auditors in monitoring IT staff in implementing required security measures, participating in updating security methods according to changes in the evolving IT environment, participating in developing specific security policies such as selecting the appropriate technology and its effectiveness, participating in developing and formulating a strategy for developing the security of electronic accounting information systems, and contributing to the detection of security breaches through reports and describing the type of breach.