Jim Kaplan's
audnet.gif (4937 bytes)

 

 

newslogo.gif (7197 bytes)
ASK (Auditors Sharing Knowledge) for Progress

August 1, 2003

Prior AuditNet-L Newsletters

The AuditNet-l Newsletter is sponsored by: PricewaterhouseCoopers TeamMate

"PricewaterhouseCoopers TeamMate is a database-driven audit management system that streamlines the audit process by providing integrated tools for documentation, report generation and file sharing."

 

 

AuditNet Links
Audit Programs
AuditNet Library

AuditNet Newsletter
Ask the Auditor
AuditNet Lists
Audit Jobs
Travel

Career Links
Partner Discounts
Search
Sign Guestbook

AuditNet Sponsors

Advertising Opportunities
About AuditNet
About Jim Kaplan
AuditNet Seminars
AuditNet Homepage

 

 al_logo.gif (1206 bytes)




logo.jpg (1604 bytes)

 

 

Sponsor News!

Thanks for all your support in the past and looking forward to continued support in the future. AuditNet® is a sponsor-supported site. Without sponsor advertising you would have to pay for use of this site.

This month check out KnowledgeLeader Internal Audit Community, a web-based internal auditing tool that will help you identify risks, develop best practices and add value to your organization. 

Remember! Clicking on sponsored ads helps support AuditNet®.


Incident response and fraud investigation - the role of the information technology auditor

All IT-related frauds start as an IT incident, which is an event that disrupts day-to-day IT processing. Incident response is the first step: determine what happened, decide what to do about it and determine whether the incident is fraud related. If so, the next step involves computer forensics: the means by which an incident investigator retrieves and assembles evidence about a computer crime. This article discusses incident response issues and then provides guidance on the role of information technology auditors in fraud response, investigation, analysis, and prevention.

This month's article was contributed by Protiviti KnowledgeLeader, an online service providing tools, templates, and other resources for internal audit and risk management. Free trials available at www.knowledgeleader.com.

Click here for the article.


Presentation and Image: A Guide for Outsourced Internal Audit Providers

by Kastuv Ray

A common question that is posed to outsourced internal audit providers at tender presentations is how they will fit in with the culture of the organization. It is sometimes very hard on the part of the outsourced provider at this juncture to explain how they will fit in. The leader of the presentation and his or her internal audit team can only explain their experiences. Contrary to popular thought, there are some outsourced internal auditors out there who actually practice what they preach.

Click here for the rest of the story!


EMPLOYERS AND RECRUITERS
FREE RESUME ACCESS FOR A DAY!

Find audit resumes at jobsinthemoney.com - the leading jobsite dedicated to finance and accounting professionals. No obligation. Full access limited to 100 resume views. Offer for new customers only.

Code: AUD_FD_08


AuditNet Job Listings (& more)

Looking for an audit job? Go to the AuditNet® Audit Jobs section for the latest job opportunities. 24 hours a day, 7 days a week you have the ability to not only look at available jobs, but you can also post your resume, apply for open jobs, research companies and obtain career advice. If you are in the market for a new job, make AuditNet® your first stop to check out what's available.

This is just another benefit of using AuditNet® as your one stop shop for all your audit and career resources.


CAREER BOOT CAMP FOR AUDITORS

Tips to Landing a Job in 2003 

by Robbie Miller Kaplan

I work with clients all the time that make no headway in the job search process and think it is the economy. After the booming 1990's where applicants were hired with little effort, I find job seekers don't do everything they are "supposed" to do. To read about five crucial steps / strategies that job seekers should ensure they follow click here.

Each month the AuditNet® Newsletter includes a career-related tip from Robbie Miller Kaplan, author of How to Say It in Your Job Search. If you like these tips, check out her books! For more career tips go the Job-Resources Web site.


Looking for Auditors?

If your company has any audit job vacancies that you are looking to fill, have your HR people contact AuditNet® to post the job and search for candidates. Using the jobs section helps support AuditNet® as well! For more information click here.


AuditNet® Resource List Updates

Click here for the new links!

Please let us know of links that are not working!


AuditNet® Statistics

For those who like to wade through the details on how popular AuditNet® is, click here for the current stats or go to the online WebTrends report.

 


AuditNet® Book Reviews

Google Hacks

by Tara Calishain and Rael Dornfest 

One of the core competencies of digital literacy is Internet search skills for conducting audit research. I use the Internet daily in the pursuit of finding audit related information. Therefore, it is very important that I make the best use of the most effective Internet search engines. Google Hacks provides an inside view of how to make the most of Google which, in my opinion, is the best search tool for auditors. The authors provide tips and tools for both the novice and the experienced searcher. If you expect to conduct effective audit research on the Internet it is important that you know the ins and out of the search engine you use. Google Hacks should be your desktop companion when searching for those elusive audit and business resources.

Google Hacks
Tara Calishain and Rael Dornfest
ISBN 0-596-00447-8, 329 pages $24.95 (US) $38.95 (CAN), ₤17.50 (UK)
order@oreilly.com
1-800-998-9938
1-707-827-7000 http://www.oreilly.com

*****

Miller Guide to Auditing Defined Contribution Plans

 By Lara Stanton, William LeRoy

In light of business failures such as Enron it is imperative that auditors focus their risk analysis on retirement plans. This 2003-2004 Miller Guide conveys everything you need to know about auditing defined contribution plans. It starts out with descriptions of the two major types of plans; defined contribution and defined benefit. The authors then jump into planning, internal controls, SAS-70 reports and more. The accompanying practice aids on CD-ROM provide an electronic copy of an employee benefit plan audit program, checklists, questionnaires, forms, and other documents covered in the book. The Miller Guide series published by Aspen Publishers continue to provide audit professionals with an excellent, comprehensive approach and tools for auditing specialized areas such as retirement plans.

Miller Guide to Auditing Defined Contribution Plans
Lara Stanton, William LeRoy
ISBN 0-7355-4303-8
Aspen Publishers
1-800-638-8437 http://www.aspenpublishers.com


The only periodical of its kind bringing useful and timely advice and insights into the prevention detection, and investigation of all forms of computer and Internet crime. The July 2003 issue includes the following articles; Fighting Computer and Internet Crime: Public/Private Sector Successes, How Easy It Is to Blow a Computer Forensics Investigation, How to Make the Right Infosecurity Investment Decisions and more.  For more information visit www.cybercrimefighter.net


 

 

The Auditor's Guide to Internet Resources, 2nd Edition!

Order it Now!

AuditNet® Internet Boot Camp for Auditors

Networking on the Internet: I Didn't Think of Doing That!

When you combine the power of the Internet and the opportunity for networking together you have a powerful partnership. Recently I was asked to research information about an inspector general function for school districts. Without a second’s hesitation I turned to the Internet. Within minutes I found two school district IG offices, an association for inspectors general and historical background information on the IG concept. By using the contact information on the school district IG offices I quickly sent off e-mails to each office and received a response from both IG’s within 24 hours. They were both quite helpful and even sent further information by snail mail (U.S.P.S) for my research. I also found that two new school district IG functions were being established and contacted the responsible officials for background and details. As a result I will not only have information for my report to management but also a framework for establishing an IG function if the concept moves forward. Networking with peer professionals takes on a whole new meaning when you have tools like the World Wide Web and e-mail. That is why I am surprised that more auditors do not take advantage of these tools on a regular basis.

Stay tuned for the next Internet boot camp tip from the auditing Internet guru!


Audit Work Programs Corner

Auditors Sharing Audit Programs and Working Papers

The following audit programs, ICQs, checklist or working papers were added this month. They are in format unless otherwise specified. Some may only be available in exchange for an audit work program contribution. They are also available in format by email in exchange for a contribution of an audit work program, ICQ or checklist. Beginning in August 2003 all new programs contributed will include the date the program was added to the inventory (dd/mm/yy). This was at the suggestion of an AuditNet® user.

  1. ACH Transactions Audit Program (8/1/03)

  2. AS/400 Control Matrix (8/1/03)

  3. Cash Advance ICQ (8/1/03)

  4. Change Management Audit Program (8/1/03)

  5. Claims Management Audit Program (8/1/03)

  6. Credit & Collections Audit Program (8/1/03)

  7. Employee Accounts Audit Program (8/1/03)

  8. Engineering & Maintenance ICQ (8/1/03)

  9. Firewall Audit Program (8/1/03)

  10. Funding for Students with Difficulties ICQ (8/1/03)

  11. Help Desk Audit Objectives (8/1/03)

  12. Systems Maintenance Audit Program (8/1/03)

  13. Uniform Guide for Initial Review of A-133 Audit Reports (8/1/03)

  14. Uniform Quality Control Review Guide for A-133 Audits (8/1/03)

  15. Windows NT Audit Program (8/1/03)

Audit Documents in the Queue!

The following audit documents will be posted next month. Interested in them now? Send an audit work program, ICQ, checklist or other audit template and receive them via e-mail. Your contribution must include your name and email address. 

  1. Baan Audit Program (9/1/03)

  2. Billings for Reinsurance Recoverables ICQ (9/1/03)

  3. Budgetary Control ICQ (9/1/03)

  4. Creditor Risk Register Template (9/1/03)

  5. External Consultants ICQ (9/1/03)

  6. JDE One World Security Audit Program (9/1/03)

  7. Legal and Government Affairs (9/1/03)

  8. Microsoft SQL Server Audit Checklist (9/1/03)

  9. Oracle Audit Checklist (9/1/03)

  10. Partnership Agreements (Education) ICQ (9/1/03)

  11. Power Plant Operations Audit Program (9/1/03)

  12. Powerlock Network Security (9/1/03)

  13. Sales System Audit Program (9/1/03)

  14. Strategic Asset Management ICQ (9/1/03)

  15. Wireless LAN Review (9/1/03)


Capital Construction Auditing

Squandering Capital – Is the party REALLY over?

by Al M. Gray

With returns of several multiples of its costs, Construction Auditing has succeeded in capturing the attention of the auditing profession. However, there is the danger that success in controlling costs from outside contractors is not met with equal vigor in a sustained emphasis on sound internal controls over capital spending.

To read the rest of the story, click here!


Software Compliance Audit News

August 2003 Update 

by Rob Harmer

Some time ago PCProfile wrote an article on Peer 2 Peer networking issues (Have You been Napstered and Under Your Nose) which talked about the risks of and file sharing.

It now seems that the issue of P2P and file sharing will probably become the biggest threat and drain on auditor resources as an issue that all auditors will have to face.

For the rest of the story click here.


Comprehensive Fraud-Fighting Computer Tool Now Available For Free Download

From AuditSoftware.net
Richard B. Lanza

 

The Institute of Internal Auditors (IIA) Research Foundation announced the posting of a free online document to help business professionals worldwide use computers to fight fraud.  Proactively Detecting Occupational Fraud Using Computer Audit Reports is designed to assist auditors, fraud examiners, and management in implementing data analysis routines for improved fraud-prevention and -detection. This report provides a comprehensive checklist of data analysis reports for every occupational fraud type in existence, as well as, general guidance to help audit teams better analyze company data.  To download this free document, click on the below link:

 

http://www.theiia.org/ecm/iiarf.cfm?doc_id=4248


Your Secret Weapon in the War on Fraud

The August issue of this fraud newsletter features articles on Sarbanes-Oxley Practical Compliance Steps, The Deadly Sins of Fraud Prevention...And How Not to Commit Them and more. AuditNet® users qualify for special rates on this publication. For more information click here


The AuditNet® Audit Bookstore

Looking for books on auditing related topics? We suggest using the AuditNet® bookstore. The bookstore focuses on Internal Audit but includes other related subjects as well. AuditNet® uses Amazon to power the bookstore so each purchase you make through this link helps support AuditNet®.


FREE! The Auditor's Guide to Internet Resources 2nd Edition

Interested in a free copy of The Auditor's Guide to Internet Resources, 2nd Edition? Write an article for the next newsletter on how you are integrating the Internet in auditing. If your article is selected, I will send you either the book or CD. Send your article to editor@auditnet.org 


AuditNet® Partner Discounts

Check out Phoenix System and Business Processes the newest AuditNet® partner offering discounts to AuditNet® users on all Methodware products. Click here for details.


Preview of Coming Attractions!

The AuditNet Monograph Series  provides useful guides for all levels of auditors from juniors right up to audit directors. If you are interested in developing a monograph on a contract basis, send an email to editor@auditnet.org

Watch for articles about forensics for auditors, risk management, audit report structure, exit conferences and more.   Book reviews on Google Hacks, Miller Auditing series and more. Have an idea for a column? Send it to editor@auditnet.org

AuditNet® is working on new specialized resources for auditors. Watch the newsletter and keep checking the Library page for updates and new resources.


AuditNet® Conference Corner

Want to announce your professional association conference to the global audit community? Send the conference name, date and URL details to editor@auditnet.org

August 3-8, 2003 14th Annual ACFE Fraud Conference & Exhibition (Chicago) www.fraudconference.com


Fraud and Theft Start Small

by Gary D. Zeune, CPA

It starts small and just gets bigger and bigger until someone notices. Nearly all the grief our profession has been getting lately stems from the giant fraud schemes and audit failures that make the front page of your daily paper. We read the articles and think they don’t apply to our company or firm. Unfortunately, that’s wishful thinking.

For the rest of the story reprinted from the New Jersey CPA May-June 2003 click here.


AuditNet® Feedback

I have at last found a site that really adds value to the auditing profession through sharing ideas and best practices globally. Keep up the good work- Regards Kobus Swart South Africa

As an external auditor who has recently "seen the light" and become an internal auditor, the mailing lists have become an invaluable source of information for me. Keep up the great work, this site is a fabulous resource for all in the audit profession. Michelle, Australia

The Auditnet is simply superb and informative for the discerning internal auditor. I am a chartered certified accountant who has spent most of my career in public practice. The moment I made a move to internal audit, and became Chief Internal Auditor at the Zambia State Insurance Corporation, I knew I had to develop new skills to meet the challenges of the new environment. Computer based audits, in particular, pose great challenges. It's nice to know that in this global world you can network with fellow professionals and find solutions to all technical problems. Darwin Shinde, FCCA Chief Internal Auditor Zambia State Insurance Corporation Limited Lusaka, Zambia

         

Copyright © Jim Kaplan
AuditNet® is a registered trademark of Jim Kaplan

Copyright and Disclaimer

All rights reserved. No part of this Website may be reproduced in any form, by copying from the Internet, photostat, microfilm, xerography, or any other means, or incorporated into any information retrieval system, electronic or mechanical, without the written permission of the copyright owner.

Send comments to: editor@auditnet.org



Revised: January 14, 2008

Address of this Page is http://www.auditnet.org/