Jim Kaplan's
audnet.gif (4937 bytes)
 

newslogo.gif (7197 bytes)
ASK (Auditors Sharing Knowledge) for Progress

 

November 2004

Prior AuditNet-L Newsletters

The AuditNet-l Newsletter is sponsored by: PricewaterhouseCoopers TeamMate

"PricewaterhouseCoopers TeamMate is a database-driven audit management system that streamlines the audit process by providing integrated tools for documentation, report generation and file sharing."

 

 

Audit Programs
AuditNet Resource Links
AuditNet Virtual Library
AuditNet Newsletter
Ask the Auditor
Audit Jobs
Partner Discounts

Search the Site
Our Sponsors
Advertise
Sign the Guestbook
AuditNet Home Page

 al_logo.gif (1206 bytes)




logo.jpg (1604 bytes)

 Accounting Procedures for Internal Control
Accounting Procedures for Internal Control
CLICK HERE TO ORDER

 

 
Corporate Governance Certification

Earn your Tulane University Law School Certificate 100% Online. Complete the program in a week: Audit Committee and reporting, legal and board issues and more. Learn from leading experts about all relevant regulations and laws including Sarbanes Oxley. Use the Program as a resource for a FULL YEAR.

To get more information click here.


AuditNet® Community

Sponsor News!

The AuditNet® community has grown by leaps and bounds over the past ten years thanks to your continued support. Yes it is hard to imagine but it has been a decade since this community was created!  Support AuditNet® by supporting our sponsors. Without sponsor and affiliate advertising and contributions from the AuditNet® community everyone would have to pay for use of this site.

logo.jpg (1604 bytes)

This month check out Pentana, a vendor that produces software for audit professionals, including integrated risk and audit management, staff scheduling and information security questionnaires.  Remember! Clicking on sponsored ads helps support AuditNet®. Remember: visiting sponsors helps support AuditNet®.


Taking a measure of IT risk

 

Much of the compliance work being done at today's public companies can be leveraged into a broader process of IT risk management. This article by Protiviti's Tom Andreesen, discusses the indicators of need for comprehensive IT risk management, how IT risk management fits with overall Enterprise Risk Management (ERM), steps in the process, and some benefits of an ongoing ERM initiative.

This article was contributed by Protiviti KnowledgeLeader, an online service providing tools, templates, and other resources for internal audit and risk management. Free trials available at www.knowledgeleader.com. For a limited time KnowledgeLeader memberships are available for the reduced rate of $500 per year. Tell them you heard about it from AuditNet.org.

Click here for the article!


Understand IT's role with the Sarbanes-Oxley Act

A guide by Mike Tarrani, IT Consultant

What is the Sarbanes-Oxley Act?
Cutting to the chase and through the hyperbole, it is a law enacted in 2002 that legislates record retention and prescribes standards for corporate accountability. The essence of the Act are internal controls and corporate governance. IT auditing is an element of compliance, as well as the maintenance and administration of systems supporting all facets of compliance.

For the complete article click here!


Audit Uncertainty: Findings from two more research studies done with the AuditNet® Community

by Matthew Leitch

During 2004 Matthew Leitch been carrying out a series of online research studies, announced through the AuditNet newsletter and discussion list, and with the participation of Jim Kaplan and members of the AuditNet community. Previous research reported included an analysis of the value of different types of evidence for Sarbanes-Oxley 404 compliance and views on what "embedded" risk management should be like.

Here are the highlights from two more studies in the series.


AuditNet® Adds a New SOx Resource

AuditNet added a new e-mail discussion group for Sarbanes-Oxley 404. This discussion group will focus on issues related to complying with Section 404 of the Sarbanes-Oxley Act including sharing of resources and experiences, asking questions and gaining a better understanding of compliance issues related to the Act.

Section 404 of the Sarbanes-Oxley Act (SOX) says that publicly traded companies must establish, document, and maintain internal controls and procedures for financial reporting. It also requires companies to check the effectiveness of internal controls and procedures for financial reporting.

In order to do this, companies must

  • Document existing controls and procedures that relate to financial reporting.
  • Test their effectiveness.
  • Report on any gaps or poorly documented areas.

To subscribe to this free new e-mail discussion group go to http://www.auditnetlists.org/sox404-l/


AuditNet Job Listings (& more)

Looking for an audit job? Go to the AuditNet® Audit Jobs section for the latest job opportunities. 24 hours a day, 7 days a week you have the ability to not only look at available jobs, but you can also post your resume, apply for open jobs, research companies and obtain career advice. If you are in the market for a new job, make AuditNet® your first stop to check out what's available.

This is just another benefit of using AuditNet® as your one stop shop for all your audit and career resources.

Click here for more jobs!


Looking for Auditors?

If your company has any audit job vacancies that you are looking to fill, have your HR people contact AuditNet® to post the job and search for candidates. Using the jobs section helps support AuditNet® as well! For more information click here.


AuditNet® Fraud Auditing Corner
Telling the Truth and Living in Limbo

By Dick Carozza

Marta Andreasen, the European Commission's chief accounting officer, awaits her professional fate after declaring the EC's budget was "massively open to fraud" and endures suspension because of her honesty.

Marta Andreasen doesn't feel that she's a whistle-blower. As the European Commission's chief accounting officer in 2002 she believes it was within her duties, as any auditor, to report that the US$120 billion EC budget was "massively open to fraud." The reward for her forthrightness was suspension from her duties and forced residence into professional limbo. As of publication, the EC's Disciplinary Board is reviewing her case after more than two years of suspension.

This article is from Fraud Magazine, the professional magazine of the Association of Certified Fraud Examiners and is a regular feature of AuditNet under a new cooperative relationships and partnership with professional associations in the interest of sharing resources for the benefit of the global AuditNet® community. .

For the rest of the article from the latest ACFE Fraud Magazine click here.


Tender Proposals

by Kastuv Ray

Writing a tender proposal can sometimes be seen to be a daunting task but the best way to overcome any fear is to “have a go.”

Click here for the rest of the story!


AuditNet® Resource List Updates

Click here for the new links!

Please let us know of links that are not working!


Free Tools for Auditors

Sarbanes-Oxley Software

To address the mounting debate about the requirement to document the
internal controls in order to comply with SOX, a new software is now
available free.

An Auditor's Travel Guide

by Jean-Louis Vergaert


The only periodical of its kind bringing useful and timely advice and insights into the prevention detection, and investigation of all forms of computer and Internet crime. The October 2004 issue includes articles on legal traps to avoid in cyber-investigations, getting serious about fighting Nigerian fraud and more.   For more information visit www.cybercrimefighter.net


AuditNet® Conference & Training News

Want to announce your professional association conference to the global audit community? Send us conference name, date and URL details or your

Fighting Fraud With Data Mining Techniques  Dallas November 2004.

The IIA's Information Technology Conference for Today's Auditor San Francisco February 2005

2004 ACFE Fraud Conferences and Training

2004 IIA Conferences and Training


AuditNet® Vendor News

Check here for the latest news from our AuditNet® sponsors!

ACL News

Caseware-Idea News and Events

Paisley Consulting press releases

Pentana news and announcements

TeamMate news and events


 

Software Compliance made easier – Now No One Can Hide!

PCProfile has now released PCProfiler version 4.5 as the latest in Anti-Piracy controls, as a vital step for organizations
who want to reduce their risk (of getting caught with illegal software, music and movies etc) where staff are using an
organizations PCs for downloading and installing unauthorized items subject to copyright laws.

For the press release click here!


AuditNet® Statistics

For those who like to wade through the details on how popular AuditNet® is, click here for the current stats.



 

The Auditor's Guide to Internet Resources, 2nd Edition!

Electronic Edition Available to Paid Subscribers


Heard on the Net!
Digital Literacy: Don’t Get Burned by Mistakes or Failure to Use Critical Thinking Skills When Evaluating Content on the Internet

During the vice presidential debate this year VP Dick Cheney made a huge digital mistake when responding to comments by John Edwards in relation to Halliburton. To refer viewers to the real facts about Halliburton, Cheney suggested they visit www.fastfacts.com for the real story. Unfortunately what he meant to say was www.fastfacts.org. Turns out that www.fastfacts.com is an anti-bush Web site.

In case you haven’t noticed there has been a deluge of scams and frauds on the Internet. Things like phishing: identity theft, email scams and fake Websites.

For the rest of the story click here!

Stay up to date with announcements on new portals, tools and sharing resources on Sarbanes-Oxley and other audit related issues by subscribing to the AuditNet® newsletter

Until next month!

If you have a tip on how you are using the Internet or software applications for auditing send them to editor@auditnet.org Watch for more Internet boot camp tips from the auditing Internet guru!


Audit Work Programs Corner

Auditors Sharing Audit Programs and Working Papers

The following audit programs, ICQs, checklist or working papers were added this month. They are in  format unless noted otherwise. Some may only be available in exchange for an audit work program contribution not currently in the inventory.  Beginning in August 2003 all new programs contributed will include the date the program was added to the inventory (mm/yy). This was at the suggestion of an AuditNet® user.

  1. Accounts Payable Module IT Controls (Nov 04)

  2. Application Controls (Portuguese) (Nov 04)

  3. Audit Materiality Assessment (Nov 04)

  4. Change Management Questionnaire (Nov 04)

  5. Checklist by Cycle (Nov 04)

  6. Consignment Sales - Allocate Stock (Nov 04)

  7. Consignment Sales - Material Handling (Nov 04)

  8. Consignment Sales - Process Order (Nov 04)

  9. Consignment Sales- Sales Accounting (Nov 04)

  10. DB2 Audit Plan (Nov 04)

  11. Evaluation of Creditors Accounts (Nov 04)

  12. File Review Checklist Social Services (Nov 04)

  13. Fraud Consideration Checklist

  14. Goods & Services Tax Reasonableness (Nov 04)

  15. Inmuebles E Instalaciones (Fixed Assets) Spanish (Nov 04)

  16. Inventory Management ICQ (Nov 04)

  17. IRIX Security Audit Checklist (Nov 04)

  18. ISA Server Security Checklist (Nov 04)

  19. IS Maintenance Activities General Controls Questionnaire  (Nov 04)

  20. Internal Control Error Considerations (Nov 04)

  21. International Financial Reporting Standards (IFRS) Checklist (Nov 04)

  22. IT Risk Assessment Planning GLB (Nov 04)

  23. Password & Security Controls (Nov 04)

  24. Purchasing Key Control Matrix (Nov 04)

  25. RACF Audit Program 2004 (Nov 04)

  26. Rating Scale Key Business & Financial Processes (Nov 04)

  27. Revenue Cycle Flowchart (Nov 04)

  28. Risk & Response Matrix (Nov 04)

  29. Skilled Nursing Facility (Nov 04)

  30. SOX 404 IT General Controls Matrix (Nov 04)

  31. Store Audit Program (Drugstore) (Nov 04)

  32. Stratification Example (Nov 04)

  33. Talent Creation ICQ (Nov 04)

  34. Using a Service Entity Checklist (Nov 04)

Audit Documents in the Queue!

The following audit documents will be posted next month. Interested in them now? Send an audit work program, ICQ, checklist or other audit template and receive them via e-mail. Your contribution must include your name and email address. 

  1. Alcohol Harm Reduction Strategy (Government) ICQ (Dec 2004)

  2. Bank Premises and Equipment Audit Program (Dec 2004)

  3. Bankers Automated Clearing System (BACS) Audit Program (Dec 2004)

  4. Borrowed Funds Audit Program (Dec 2004)

  5. Cajas de Ahorro ICQ (Dec 2004)

  6. Configuration Management (Dec 2004)

  7. Congestion Reduction Strategy ICQ (Dec 2004)

  8. Demand Deposits Audit Program (Dec 2004)

  9. Due From/Due To Banks Audit Program (Dec 2004)

  10. Economic Development in the Mining Industry ICQ (Dec 2004)

  11. Engagement Evaluation Questionnaire (Dec 2004)

  12. Environmental Risks Questionnaire (Dec 2004)

  13. Funds Transfer Audit Program (Dec 2004)

  14. General IT Audit Program (Dec 2004)

  15. Human Resources Benefits Attributes Testing (Dec 2004)

  16. Human Resources Payroll Attributes Testing (Dec 2004)

  17. Integrated Audit Program (Dec 2004)

  18. Investment Securities Audit Program (Dec 2004)

  19. IRIX Security Audit Checklist (Dec 2004)

  20. MCRP Bank Review Procedures Audit Program (Dec 2004)

  21. MVS Technical Operating System Audit Program (Dec 2004)

  22. Other Assets Other Liabilities Audit Program (Dec 2004)

  23. Payroll Overtime Audit Program  (Dec 2004)

  24. Risk Assessment Questionnaire (Dec 2004)

  25. SOx 404 Purchasing and Accounts Payable (Dec 2004)

  26. Voice Over IP Questionnaire (Dec 2004)

  27. Windows XP Security Checklist (Dec 2004)

Contribution Required Audit Documents!

The following documents require the contribution of an audit program not currently in the inventory. They are also available to subscribers to the Audit Programs Subscription Service.

  1. Electronic Medical Record (EMR) Security Testing

  2. Interactive Risk Controls Testing

  3. IT Audit Assessment Questionnaire

  4. Revenue Cycle Audit Program

  5. SOx Financial Reporting Test of Controls

  6. Sarbanes-Oxley HR Risk Assessment

  7. Sarbanes-Oxley IT Management Audit Program & ICQ (82 pages)

  8. SAP R3 Interface Controls Audit Program

  9. Standards for Business Controls Vol. 1 General Business Processes

  10. Standards for Business Controls Vol. 2 IT Processes

  11. Telecommunications Audit Program (includes cellular and voicemail)

  12. Water Scarcity ICQ


AuditNet® What's New This Month?

This month there are new articles including Understand IT's Role with Sarbanes-Oxley, findings from two recent research studies conducted by Matthew Leitch and a dissertation on A Performance Measurement Framework for Internal Audit.  I reviewed Monarch Pro V7 and There is a new audit programs subscription service available as an alternative for those auditors that are unable to contribute material to AuditNet®. There are many new audit programs in the queue for the AuditNet® community. All this and more! The best way to find all the resources on the site is by going to the Virtual Library or use the site search.


A PERFORMANCE MEASUREMENT FRAMEWORK FOR INTERNAL AUDIT

by Stan Farmer

There are three compelling reasons why internal audit should be concerned with performance measurement:

  • The need to comply with Professional Standards
  • The need to demonstrate value
  • To respond to changes in the global environment

The objectives of this research are therefore to:

  • identify best practice in the measurement of business performance;
  • identify current practice in the measurement of performance in internal audit;
  • compare and contrast current practice with best practice; to,
  • develop a performance measurement framework for internal audit.

For the rest of the results of this dissertation click here!


AuditNet® CAATT Corner

Monarch V7 Professional Edition

One of the skills required for the next generation of internal auditors is the ability to identify relevant digital information within the vast amounts of data available for audit projects. This means that digital age auditors need a set of tools
that will facilitate accessing information stored on organizational computers and media. One of these tools is Monarch V7 Professional Edition. Monarch software has actually been available as a data interrogation tool since the introduction of PCs in the late 1980's. The latest version is a much more intuitive program that many technology oriented auditors will find easy to use.

For the rest of the review click here!


AuditNet® Software Compliance Audit Corner

“As An Auditor, You Don’t Stand a Ghost Of A Chance - Or, Do You?”

This new AuditNet® monograph focuses on the issues auditors face with imaged PCs being deployed in organizations. You didn’t know there was a problem? This Monograph will alert auditors about what to watch out for as there are some tricks and traps that are being used that might cause some grief for your organization if the anti-piracy police knock at the front door!

For the new monograph click here!

Current Views on Governance and Compliance


Your Secret Weapon in the War on Fraud

The October 2004 issue of this fraud newsletter features articles on using the fraud management lifecycle to minimize fraud losses, new high tech tools for busting forgers and counterfeiters and more. AuditNet® users qualify for special rates on this publication. For more information click here


The AuditNet® Audit Bookstore Corner

Looking for books on auditing related topics? We suggest using the AuditNet® bookstore. The bookstore focuses on Internal Audit but includes other related subjects as well. AuditNet® uses Amazon to power the bookstore so each purchase you make through this link helps support AuditNet®.

Book Reviews

Auditor's Dictionary : Terms, Concepts, Processes, and RegulationsAuditor’s Dictionary
Terms, Concepts, Processes, and Regulations

by David O'Regan

Review by Jim Kaplan CIA CFE
AuditNet® LLC Executive Director

Why would anyone want a dictionary that focuses on audit terms, concepts, processes and regulations? It is because in the current environment and number of audit professionals, auditing is clearly something that everyone needs to understand. David O’Regan has compiled a comprehensive first-of-a-kind work that explains auditing terminology from A to Z. The author goes beyond a description of terms by also combining Web site references where appropriate. The Auditor’s Dictionary includes more than 1,700 key auditing terms, concepts, regulations, institutions, people and publications. This book can be easily understood by non-auditors and greatly appreciated by financial and audit professionals. The Auditor’s Dictionary is a must have addition for professional libraries and a standard desktop reference for accountants, auditors and financial professionals.

Order the book!

How to Say It When You Don't Know What to Say  The Right Words for Difficult Times

By Robbie Miller Kaplan

As auditors we constantly interact with diverse stakeholders such as colleagues, managers, employees and others. Frequently we encounter people dealing with challenging and difficult times that may or may not be related to work. Our reaction to these situations is conveyed in our behavior both nonverbal and verbal.

For the rest of the review click here.


FREE! The Auditor's Guide to Internet Resources 2nd Edition

Interested in a free copy of The Auditor's Guide to Internet Resources, 2nd Edition? Write an article for the next newsletter on how you are integrating the Internet in auditing. If your article is selected, I will send you an electronic copy of the book. Contact us for details.


AuditNet® Partner Discounts

Check out all the software vendors that offer discounts to the AuditNet® community.

AuditNet® It pays to be a member!

For information on partner discounts click here.


Preview of Coming Attractions!

The AuditNet Monograph Series  provides useful guides for all levels of auditors from juniors right up to audit directors. New guides are under development for Sarbanes-Oxley, internal controls and Internet for auditors. If you are interested in developing a monograph on a contract basis, contact us.

Watch for new articles from contributors. Reviews are in the works for AskSam and PDF Hacks. Watch the newsletter for more products, services and tools for auditors. Have an idea for a column? Contact us.

AuditNet® continues adding new specialized resources for auditors. Watch the newsletter and keep checking the Library page for updates and new resources.


AuditNet® Feedback

The current economic situation has forced me to decide on a change of career. I opted for IT Audit on a friend's advice and from the day I first visited your website, my life has never been the same again. You have provided me with every knowledge I need to become a professional in a twinkle of an eye. You are my daily companion. The flowing stream that daily quenches my thirst for knowledge. Your site is the encyclopedia in IT Auditing. Thank you for the wealth of knowledge shared. More grease to your elbows!!!

This site is really of very good help to start up students in accounting and auditing stream, it gives a lot of support in audit programme understanding and planning. Thanks a lot of such a vast and informative collection of data.

Great site! I am an excise tax auditor working for the federal government, and I have found your site to be quite useful in many of my audits.

Hi I am Lecturer of Auditing at college. I found this site superb for all of those who want to get any of the information in the field od auditing. I want to congratulate U for establishing such a set up.

As a "newbie" , fresh out of college I am so thankful for your site. Ihave to write my first audit and was nervous about how and what should be included. I will be back

For more comments click here!


q        

Copyright © Jim Kaplan
AuditNet® is a registered trademark of Jim Kaplan

Copyright and Disclaimer

All rights reserved. No part of this Website may be reproduced in any form, by copying from the Internet, photostat, microfilm, xerography, or any other means, or incorporated into any information retrieval system, electronic or mechanical, without the written permission of the copyright owner.

Comments



Revised: September 09, 2009

Address of this Page is http://www.auditnet.org/