Jim Kaplan'saudnet.gif (4937 bytes)  

newslogo.gif (7197 bytes)
ASK (Auditors Sharing Knowledge) for Progress

 

November 2006

Prior AuditNet-L Newsletters

The AuditNet-l Newsletter is sponsored by: PricewaterhouseCoopers TeamMate

"PricewaterhouseCoopers TeamMate is a database-driven audit management system that streamlines the audit process by providing integrated tools for documentation, report generation and file sharing."

2nd Annual Telecoms Internal Audit Forum, 13 – 14 February, 2007, Brussels
The foremost executives will gather together to address the current concerns associated with risk and internal audit functions within telecom. Join them and evaluate your own operations and uncover hidden reserves in efficiency and performance.

 

 

 

what
job title, keywords
where
city, state, zip

 

logo.jpg (1604 bytes)

 Accounting Procedures for Internal Control

 

AuditNet® Community

Sponsor News!

The AuditNet® community has grown by leaps and bounds thanks to your continued support. Yes it is hard to imagine but it has been more a decade since this community was created!  Support AuditNet® by supporting our sponsors. Without sponsor and affiliate advertising and contributions from the AuditNet® community everyone would have to pay for use of this site.

This month check out ACL Services Ltd. which provides Business Assurance solutions to financial executives and audit professionals worldwide. Combining market-leading software and professional services, ACL's proven solutions enable internal auditors to assure compliance, reduce risk, and minimize loss. ACL's global customer base includes 89 of the Fortune 100 and over half of the Global 500.

Remember! Clicking on sponsored ads and visiting their sites helps support AuditNet®. 


Tactics to rebalance your internal audit function

By John Champ and Chris Cebula, Protiviti

Now that the initial burden of Sarbanes-Oxley compliance is lightening for many companies, Chief Audit Executives are feeling pressure from all sides to "rebalance" their internal audit activity. While few will argue with the goal of rebalancing, most internal audit groups find it
challenging to translate this goal into tactical business plans. This article highlights specific steps companies can take to rebalance their IA activities.

Click here for the rest of the story!

This article was contributed by Protiviti KnowledgeLeader, an online service providing tools, templates, and other resources for internal audit and risk management. Free trials available at www.knowledgeleader.com. For a limited time KnowledgeLeader memberships are available for the reduced rate of $595 per year. Tell them you heard about it from AuditNet.org.


Resume Tune-Up

Toot Your Horn!

Corrine's resume details her responsibilities as she has progressed through a banking career. But resumes need to demonstrate what you have to offer and Corrine must do this with accomplishments and descriptive details that illustrate the progression.
It would help the reader if Corrine organized and grouped her positions under organizational names rather than consistently repeating the bank names. An opening statement for
each position should specify the scope, depth and breadth of the job. For starters, indicate type of bank, number of branches and size of staff. A good rule to follow is to quantify wherever possible. Don't leave the reader guessing; for example, share what kind of suspicious activities and the outcomes. When it comes to achievements, Corrine needs to toot her own horn by communicating what she did differently that wasn't done before. It would help to know how management responsibilities differ
between a start-up and an established branch. A synonym dictionary or thesaurus will eliminate redundancies. Education and certifications are more clearly highlighted when separated into two distinct sections. High school education isn't included once you have professional education. Corrine should begin her resume with a well-crafted
qualifications summary that showcases her accomplishments, expertise and strengths. This will attract the reader and make them want to learn more about Corrine's credentials.

Get a Free Resume Analysis!

AuditNet Adds a New Career Feature: The Resume Tune-Up.

Nationally recognized resume expert and author of How to Say It In Your Job Search, Robbie Miller Kaplan will select one auditor resume each month and suggest ways to transform the resume from passable to powerful.

If you would like your resume to be considered for a tune-up, please e-mail it to Ms. Kaplan. You will be notified by e-mail if your resume is selected. You will need to make yourself available via e-mail to answer a few questions with a tight deadline.  Ms. Kaplan will send a critique and suggestions to the individual selected and a summary Resume Tune-Up will appear in the monthly newsletter column.  If selected you give AuditNet the right to display your resume for the column.


AuditNet® What's New This Month?

Online Training for Auditors

AuditNet has teamed with the Quality Assurance Institute and Internal Control Institute to offer online audit training at a low cost. Get quality CPE at a cost you can afford!

Online Internal Audit Manual

For those of you who are starting an audit function, check out the Internal Audit Manual.

New Design Preview!

AuditNet is updating the site with a new design format. Check out the following pages and let me know what you think by clicking here!

New Columnist

Dan Swanson, a senior security and internal audit professional will now provide his list of recommended resources for AuditNet readers.

Audit Programs

The audit programs section of AuditNet now requires registration in order to access.  New audit program contributions are available only to paid subscribers or on a one-for-one exchange basis. However 181 standard management audit programs were added this month to the free content thanks to Professor Andrew Chambers of the UK. There are over 38,000 registered users. A multi-user subscription rate was added to the individual subscription program to the premium content. Organizations that need more than 2 staff members accessing the service will benefit from this new rate. There are new additions to the premium audit programs available as an alternative for those auditors that are unable to contribute material to AuditNet®. Site licenses are also available for organizations with more than 15 users.

The best way to find all the resources on the site is by going to the Virtual Library or use the site search.


Technical Consultants' Services
[Professional Fees – Scope of Services vis-à-vis Claims]
 Ignorance, Negligence, Collusion or Fraud

by Gursharan Singh

A construction company [‘Client’] had been awarded in May 2002 a sub-contract for construction of a part of a Railway Infrastructure Construction Project [‘Project’] at a lump sum cost of RM520.0m. The track was to be designed for electrified track and with computerized signaling system. It was to be constructed on the ‘Design and Build’ concept. However, the ‘Client’ lacked in-house expertise that was relevant for certain components of the ‘Project’. One of these components referred to construction of Marshalling Yards [‘Yards’] with an estimated cost of RM150.0m.  Consequently the ‘Client’ appointed in July 2002 a private consulting engineering firm [‘Consultants’] with relevant expertise and experience to provide the necessary civil and structural engineering consulting services [’Services’] in respect of the ‘Yards’. 

Click here for the rest of the article!


IIA Technology Audit Guide Series

New Guide Released

Guide 5: Managing and Auditing Privacy Risks

Global Technology Audit Guide – 5: Managing and Auditing Privacy Risks is intended to provide the chief audit executive (CAE), internal auditors, and management with insight into privacy risks that the organization should address when it collects, uses, retains, or discloses personal information. This guide provides an overview of key privacy frameworks which help to understand the basic concepts and aid in finding the right sources for more guidance regarding expectations and what works well in a variety of environments. It also covers the details on how internal auditors complete privacy assessments.

Each Global Technology Audit Guide (GTAG) will be written in straightforward business language to address timely issues related to information technology management, control, or security. GTAG will be a ready resource series for chief audit executives to use in the education of members of the board and audit committee, management, process owners, and others regarding technology-associated risks and recommended practices.

Previous Guides:


AuditNet® Fraud Auditing Corner
ACFE AND AICPA
UTILIZE STRENGTHS TO FIGHT FRAUD
An interview with Barry C. Melancon, CPA
President and CEO of the AICPA

By Dick Carozza

Why do the Association of Certified Fraud Examiners and the American Institute of Certified Public Accountants work together? The main reason is to protect the public interest, according to AICPA President and CEO Barry C. Melancon, CPA. "Both organizations are dedicated to helping business succeed," Melancon says in a recent interview. "Fraud detection and protection are important components of that mission."

This article is from Fraud Magazine, the professional magazine of the Association of Certified Fraud Examiners and is a regular feature of AuditNet under a new cooperative relationships and partnership with professional associations in the interest of sharing resources for the benefit of the global AuditNet® community. .

For the rest of the article from the latest ACFE Fraud Magazine click here.


New Exchange Group Formed for Law Firm Internal Auditors

The internal audit function is a relatively new concept to law firms and only within the past few years did law firms begin to develop or consider such a program. This Internal Audit Exchange Group was borne from a desire to share ideas amongst professional managers at law firms, national and international, on how to approach and perform internal audits on processes and functions specific to the industry and environment and improve internal controls. The group consists of internal audit and finance managers of law firms, that range from having well established to non-existent internal audit programs. We hold meetings at least twice a year via conference call and often invite speakers from public accounting firms or related industries to address the group on various topics.

If you are interested in information about this group, please contact Karen Watkins at kwatkins@mofo.com.


Auditing and Fraud in Publics Schools - Recent News

This column will features articles and news on the topic of auditing in public schools. If you have an article or story link you would like to contribute please contact us.

Audit Finds Good Financial Practices at
Deposit Central School District

A Comptroller’s audit of the Deposit Central School District found good financial management practices, State Comptroller Alan G. Hevesi’s office said today.

The audit of the Deposit School District, which covers the Towns of Deposit, Masonville and Tompkins in Delaware County and the Town of Sanford in Broome County, is part of a statewide effort by the State Comptroller’s office to improve oversight and fiscal practices at schools. The initiative began in response to widespread theft and other questionable actions that came to light in several school districts on Long Island in 2004.

For the rest of the story click here!

For more school and local government news from New York State click here!


AuditNet® Conference & Training News

Want to announce your professional association conference to the global audit community? Send us conference name, date and URL details. (A reciprocal link to AuditNet is required).

2nd Annual Telecoms Internal Audit Forum, 13 – 14 February, 2007, Brussels

SuperStrategies Audit Best-Practices Conference  MIS Training Institute April 24-26, 2007 Las Vegas, NV

2006 ACFE Fraud Conferences and Training

2006 IIA Conferences and Training

* indicates events where Jim Kaplan is speaking


Opportunities to Share Your Knowledge and Earn Royalties

Pleier Corporation is still seeking additional authors to publish on CD and earn royalties.

AuditNet's last posting resulted in the publishing of "A Practitioner's Guide to Performance Auditing" by Muhammad Akram Khan - see http://www.pleier.com/pacd.htm and "Auditing IT Infrastructures" by Alan Oliphant - see www.pleier.com/aiti.html.

Pleier Corporation is looking for additional authors who have quality and quantity of Internal Audit-related material appropriate for an entire CD title.

Pleier Corporation would especially like to publish a CD on Contract/Construction Auditing by an author with practical experience and an ability to communicate that information for distribution on CD or DVD.

Available topics continue to grow especially with new authors from AuditNet like Muhammad Akran Khan and Alan Oliphant.

Publish your own CD or DVD to earn royalties and receive worldwide exposure.

Available titles currently completed include:

21st Century Audit Management
A Practitioner's Guide to Performance Auditing
Auditing Fraud
Auditing IT Infrastructures
Auditing Purchasing and Contracts
Control Self Assessment
Internal Auditor Toolkit
Modern Integrated Audit Approach
Risk Management: Best Practices
Risk Management and Risk Assessment
Systems Analysis and Design

INTERESTED IN PUBLISHING

For additional information email pleier@pleier.com or call Joe Pleier at (949) 830-1575.

DISCOUNTS TO AUDITNET READERS

As a reminder, Pleier Corporation offers 10 % discounts to AuditNet readers at www.pleier.com.  To take this discount order online and enter the word AUDITNET in the coupon field at checkout.


Check out Training on CD

A Practitioner's Guide to Corruption Auditing

AuditNet users qualify for a $20 coupon CORRUPT valid for online sales from May 15 to June 15 that discounts the $95 regular price.

Exceeding Expectations for Internal Auditors

 “Exceeding Expectations” contains 1 hour and 20 minutes of PowerPoint presentation with synchronized digital soundtrack offering thought-provoking and practical ideas about how Internal Auditors can exceed the expectations of audit clients. This seminar offers state-of-the-art thinking using state-of-the-art technology. Receive all the benefits of attending a seminar at your convenience in a suitable format for both group and individual self-paced training.


Registered User Free Tools

Internal Audit Manual (Coming Soon)

AMIGO (Audit Management and Information Guidance Software)

The Perils of Mount Must Read

SOXERM

AuditNet Monographs

Premium User Tools

Sarbanes-Oxley, IT and Management Audit Programs

The Auditor's Guide to Internet Resources 2nd edition

Sarbanes-Oxley Section 404 Compliance for IT Managers 2nd Edition

Procedure Guidelines and Controls Documentation

Cobit 4th Edition Domain Quiz

 

Ask the Auditor

Each month I select one question submitted to Ask the Auditor and provide an answer using the same digital tools and techniques that I recommend to all auditors. 

Q: Are there any matrices are formulas for estimating numbers of staff per activity: in particular, I am looking at an IT Dept with 6 main in-house built systems and all of the usual support/security functions for a staff of 550 mainly based at one site. I am amazed at how much the ratios vary from one IT Dept to another (of similar sizes/ops). Very grateful for any thoughts.

A: Great question! Because each industry is different there is no "common or standard" formula. Forrester Research has studies which you can purchase. You can also try Infotech for research reports. Another possibility is the Gartner Group. Reports on staffing trends are typically available for sale (no free lunch) and can cost as much as $495. If you need this information for an engagement I suggest making the investment and consider it a cost of doing business. You could also try the professional associations as they may have research studies that are available. These may only be available at no charge for members. 


Heard on the Net!

AuditNet®  Adds 181 New Programs to the Free Content Area

AuditNet added 181 standard management audit programs to the free content area available to registered users. Thanks to Professor Andrew Chambers of Management-Audit, registered AuditNet users  now have access to the standard audit programs he developed.

Thanks for your support and until next month!

If you have a tip on how you are using the Internet or software applications for auditing contact us. Watch for more Internet boot camp tips from the auditing Internet guru!


Audit Work Programs Corner

Register Now!

Access to the free audit program section now requires registrationThe following audit programs, ICQs, checklists or working papers were added this month. They are available on a 1 for 1 exchange for an original audit work program not currently in the inventory. If you unable to share audit programs then consider subscribing to the premium content which provides you with access free and premium content 24/7/365. 

E-Books for Subscribers to the Annual Audit Programs

  1. Acceptable Use Review Internet & Phones-Construction (Nov 06)

  2. Cash Collection System-Healthcare (Nov 06)

  3. Collateral Audit Program-Auto Finance (Nov 06)

  4. Commercial Credit Audit Program-Auto Finance (Nov 06)

  5. Company Vehicles (Nov 06)

  6. Computer System Retirement Guidelines (Nov 06)

  7. Ensure Continuous Service-Mfg (Nov 06)

  8. Plant Maintenance Department-Mfg (Nov 06)

  9. Supply Chain Finance (Nov 06)

  10. Sybase Server Configuration (Nov 06)


Internal Audit Manual

Looking for the "technically correct" answer to an internal audit related question or inquiry? Don't have a manual or yours does not include the current professional requirements? Not a problem - just go to Your IAM. It's as easy as that!

Based upon past internal audit experiences and observations of current internal audit practices, the benefits to be gained by using Your IAM are numerous. For example:

  • Your IAM is always on-line and can be accessed from anywhere, at any time
  • It is always current and more importantly, you don't have to up-date it
  • Become more efficient and effective - do it the "right way" the first time
  • Reduce your training costs
  • Become "State-of-the-Art" - especially now in preparation for that required external QAR

AuditNet users will get a 5% discount off the published rates. In order to get this discount click here!


AuditNet Training for Auditors

AuditNet has teamed with the Quality Assurance Institute and the Internal Control Institute to offer you the following online cost-effective audit-related courses. The courses cost from $30 to $90 depending on the course and provide 1 to 3 continuing professional education units. An easy way to get CPE!

For a list of course offerings click here!


AuditNet Sarbanes-Oxley News

Landmark Study Reveals SOX Compliance Issues

AccountingWEB.com - Oct-16-2006 - COSO 1992 Control Framework and Management Reporting on Internal Control: Survey and Analysis of Implementation Practices, a landmark research study by the Institute of Management Accountants (IMA), reveals two key cost drivers for public companies complying with Sarbanes Oxley (SOX) Section 404.

For the rest of the story click here!

There are plenty of articles in the news on the topic of Sarbanes-Oxley. Here is a link to a site that does the research and provides you with links to all the relevant stories.

Sox-Online


AuditNet Career Center

Auditors Looking for Jobs!

Companies Looking for Auditors!

The Matching Service for Auditors!

Go to the AuditNet® Career Center now for the latest job opportunities and career-related information and tools. 24 hours a day, 7 days a week you have the ability to not only look at available jobs, but you can also post your resume, apply for open jobs, research companies and obtain career advice. If you are in the market for a new job, make AuditNet® your first stop to check out what's available.

If your company has any audit job vacancies that you are looking to fill, have your HR people contact AuditNet® to post the job and search for candidates.

This is just another benefit of using AuditNet® as your one stop shop for all your audit and career resources.


AuditNet® CAATT Corner

Is your firm doing enough to mitigate fraud malpractice claims?

By Richard B. Lanza, CPA/CITP, CFE, PMP

Expectations are rising and professional standards are becoming more stringent as to the level of work effort. Ensure your firm is doing enough in their review, compilation, and audit engagements by following these guidelines.

For the rest of the story click here!

Editors Note: Also see a free Webinar  - Not All SAS70 Reports Are Created Equal Dec. 12, 2006 1:00 pm.

Learning Objectives:
• What is a SAS70 Report…and is not
• Why are SAS70 Reports in such demand now and why you will likely get asked to have one
• When you should request a SAS70 from someone else and what you should do when you receive one
• Should SAS70 reports vary so widely
• What is required content in a SAS70
• What you may not learn from your SAS70 provider
• Top 10 concerns of those needing a SAS70 Review
• How to buy a SAS 70 and get maximum value

Register here to attend and earn 1 CPE!


 

AuditNet® Book Reviews

 

 


AuditNet® Software Compliance Audit Corner

 

New Monograph on Software Compliance Auditing: Looking for a Career Change?

If you work in the IT sector and keep an eye on the job market then this feature might be of interest to you, but probably it may not be what you are expecting to hear!

Many IT personnel are more than aware (or they should be) that software compliance (making sure that the number of licenses that installed matches what licenses paid for) is an important part of protecting the business or organization.
The problem is that many audit and IT personnel start the process off, and it never gets finished due to a number of good and valid reasons. This might sound a bit lame, but our experience over the last 15 years has uncovered a range of excuses that border on the plain ridiculous to a very high and credible technology set of problems preventing or hindering the auditing / validation requirement to take place.

Registered users can read the complete monograph by clicking here!

Watch for a link to almost 20 software compliance audit articles available to AuditNet registered users!

Looking for a low cost audit software tool? AuditNet users can order PC Profile's AUDIT Baseline version 4 for $140 (normally $195). Click here for info and make sure you let them know you are an AuditNet user.


Your Secret Weapon in the War on Fraud

The October 2006 issue of this fraud newsletter features articles on preservation and protection of a fraud crime scene, Are Your Vendors Reals, AML Compliance and more. For a free issue of this excellent publication click here!


The AuditNet® Audit Bookstore Corner

Looking for books on auditing related topics? We suggest using the AuditNet® bookstore. The bookstore focuses on Internal Audit but includes other related subjects as well. AuditNet® uses Amazon to power the bookstore so each purchase you make through this link helps support AuditNet®.

How to Say It When You Don't Know What to Say  The Right Words for Difficult Times

By Robbie Miller Kaplan

As auditors we constantly interact with diverse stakeholders such as colleagues, managers, employees and others. Frequently we encounter people dealing with challenging and difficult times that may or may not be related to work. Our reaction to these situations is conveyed in our behavior both nonverbal and verbal.

For the rest of the review click here.


FREE! The Auditor's Guide to Internet Resources 2nd Edition

Interested in a free copy of The Auditor's Guide to Internet Resources, 2nd Edition? Write an article for the next newsletter on how you are integrating the Internet in auditing. If your article is selected, I will send you an electronic copy of the book. Contact us for details.


AuditNet® Vendor News

Check here for the latest news from our AuditNet® sponsors!

ACL News

Caseware-Idea News and Events

Paisley Consulting press releases

Pentana news and announcements

TeamMate news and events


Shortage of U.S. skilled workers by 2020 ?

By Tom Crouch, CPA, CIA, CISA, and Attorney

Tom Crouch has written a series of articles on this subject. These articles are a must read for the audit community. The latest article covers Key Process Continuity.

Management is responsible for manpower and succession planning. Such planning is not happening on a widespread and in-depth basis. Management has not taken steps to ensure the continued smooth operation of key processes.

For the rest of the article click here!


Dan's
 Internal Audit Corner

Each month Dan Swanson, a senior security and internal audit professional will provide his list of recommended resources for AuditNet readers. You can reach Dan at his website or by clicking here.

Compliance and Ethics 101

Broadly understood, compliance with an organization’s policies and procedures is a very important activity that helps make organizational governance effective. Monitoring and maintaining compliance is not just to keep the regulators happy; compliance with regulatory requirements and the organization’s policies and procedures is a critical component of an effective enterprise-wide risk management program. It can also be an important way in which an organization achieves its business goals, sustains its ethical health, works towards long-term prosperity, and preserves and promotes its values.

For Dan's column click here!

Auditing a Compliance and Ethics Program Evaluating the Design and Operating Effectiveness  Webinar - November 14, 2006


AuditNet® Resource List

Please let us know of links that are not working!

Click here for the latest update!


Coming Attractions!

AuditNet will be working with AccountingWeb to provide readers with knowledge feeds to deliver digital content directly to AuditNet users. Watch for details. AuditNet is also working with professional associations to provide access to the audit program inventory. Stay tuned!

The AuditNet Monograph Series  provides useful guides for all levels of auditors from juniors right up to audit directors. As soon as I can make some time I will be working on new guides for Sarbanes-Oxley, internal controls and Internet for auditors and other relevant subjects. These guides will be available to registered subscribers. If you are interested in developing a monograph on a contract basis, contact us.

Watch for new articles on Sarbanes-Oxley, Information Security, Software Auditing, CAATTs, and more from contributors. Reviews are in the works for more audit and SOx books. Watch the newsletter for more products, services and tools for auditors. Have an idea for a column? Contact us.

AuditNet® continues adding new specialized resources for auditors. Watch the newsletter and keep checking the Library page for updates and new resources.


         



 



Revised: January 14, 2008