"PricewaterhouseCoopers
TeamMate is a database-driven audit management system that streamlines
the audit process by providing integrated tools for documentation, report
generation and file sharing."
Search the Net:
Search WWW
Search www.auditnet.org
The Auditor's Guide to Internet Resources, 2nd Edition
Available!
The
Internet is revolutionizing just about every sector of life it touches
commerce, communications, education and the media. For internal
auditors, it presents an invaluable resource to those who know how to
use it.
The
Auditor's Guide to Internet Resources, 2nd Edition is
the only book on the Internet written expressly for internal auditors.
Expanded and updated to include the latest Internet trends and
resources, the book provides all the Internet competency skills
auditors need to become digitally literate. Order
your copy now! Call 877-867-4947 (Toll free in U.S. and
Canada) or FAX 770-442-9742 or email
iiapubs@pbd.com
Use Order Number KPR320 and receive the IIA member price. It pays to
use AuditNet!
Now
Available on CD-ROM!
Without the
support of our sponsors, AuditNet would not be possible. Please
show your support by visiting their sites and evaluating their
services.
AuditNet
Exclusive!!!!
Software Compliance
Audit Tip
This article written
exclusively for AUDITNET.ORG
by: PCProfile
Rob Harmer Consulting Services Pty Ltd
Have a think about the following
statement.....................
Whilst you are busy reading this
web page and listening to music via one of the many popular music file
sharing programs (remember you agreed to file share so you could
access Napster etc) then you may have had files copied, or lifted, or
deleted, or altered, from "right under your nose"!
If you aren't interested, then just
continue on listening to MP3 files, but be aware that you may also be
unloading your credit card and bank account details, corporate
information, trade details, sensitive details, intellectual property
and so on with whoever wishes to extract them from your PC right under
your nose, whilst you enjoy your music!
It's a FACT - File sharing is
here to stay!
The Application Service Provider (ASP) market
model is based on "renting software and services" across the
web. The Microsoft NET model is based on the same approach and the
HailStorm technology they announced recently confirms this view.
The ASP model has had some nervous starts with some failed service
providers already and many Information Technology Professionals are
very nervous about using software "over the web" as a means
of running the business. This article is not about ASP
activities BUT about the wider issues and risks of FILE SHARING!
There are File Sharing software web located
services already on offer that allow Peer to Peer (p2p) file sharing
of much more than you might be comfortable with! In fact they
are becoming very attractive web sites as everybody loves FREE
software! see: http://www.auditnet.org/articles/have_you_been_napstered.htm
HOWEVER some of the software at these sites
offers access using file sharing techniques to not only MP3, and
Sounds, Images, etc BUT ALSO executable files, documents, spreadsheets
etc TO ANY user who cares or can locate an OPEN share on a PC based
system.
The threat here is ENORMOUS in piracy, theft of
corporate or private data and the risk is rising daily!
What sort of files can be accessed using specialist file sharing
software?
They could be any one of the following:
music
images
documents
text
executable files
passwords
credit card details
bank account details
customer details
corporate documents
corporate spreadsheets
intellectual property
new technologies
R&D details
personal records
Basically it can be any kind of file, application or
corporate sensitive information that is stored and saved on the
local hard drive or network drive where the "share" has
granted (unwittingly) open access to other unseen users across the
Internet! The most extensive capability is located at ShareSniffer
located at http://www.sharesniffer.com
who have come up with a technique
for a trademarked product for a fee that allows you to DETECT open
shares on any PC on the Internet and then copy/download/execute that
file without the end user knowing.
This means if your open PC on the www has a share that is locatable
then they have access to your data etc. If you are a home user the
biggest risk is your credit card and bank account details.
Of course, they have to have "intent" to grab your
details - BUT can you afford the risk?
(PC Profile offers a free
25 user software
compliance message reminder software).
For more details for these and other resources visit
http://www.pcprofile.com/
To access the programs in other formats go to www.auditnet.org
and click on Audit Programs.
This month we have added audit work programs in Spanish.
To access the programs go to www.auditnet.org
and click on Audit Programs.
New
Publication Offers a Discount to AuditNet Users
White-Collar Crime Fighterwww.wccfighter.com
the only source of exclusive, authoritative "how-to"
information for financial crime fighters offers AuditNet users a
discounted subscription rate of $77-- a savings of $20 off the regular
rate.
New
Additions to the Requested Audit Programs
The following items were added to the
Clearinghouse of Requested Audit Programs. If you have
an audit program that meets one of the requests,
please send it to jmkaplan@ix.netcom.com
in the interest of "electronic progress through sharing."
Timber Operations Audit Program
Lawson/SMS web enable Financial Process
and/or HealthCare Procurement Suite
Corporate Aircraft Utilization & Administration
Corporate Merger Audit Program
Employer Compliance with HIPAA Regulations SAP R/3 HR Module
Trucking Operations Worksheet
To see the other audit programs that auditors are looking for, go
to www.auditnet.org
and scroll to the bottom of the page.
AUDITNET JOB LISTINGS
(& MORE)
Looking to make a career change? Go to AuditNet's Audit Jobs
section for the latest job opportunities. 24 hours a day, 7 days a
week you have the ability to not only look at available jobs, but you
can also post your resume, apply for open jobs, research companies and
obtain career advice. If you are in the market for a new job, make
AuditNet your first stop to check out what's available.
This is just another benefit of using AuditNet as your one stop
shop for all your audit and career resources.
Let us know how you like the new format for Audit Jobs by sending
an email to the editor@auditnet.org
Recent job listings:
Student Finance Corporation, I.S. Auditor
Stanford University, Audit Mgr & Sr. Auditor
Morgan Stanley Dean Witter, Audit Opportunities
Deloitte & Touche, Internal Auditor
Viacom, Internal Audit Manager
For information on the above jobs for auditors go to the Audit Jobs
section of AuditNet from the AuditNet page at www.auditnet.org
Internal Auditor Toolkit Available!
Michael Lapelosa, CISA, CFE, Audit Director for Group Health
Incorporated (GHI) and a former president of the New York chapter of
IIA, recently authored a 2 hour presentation on CD titled
"Internal Auditor Toolkit".
This 2-hour training CD is available at $150 - mention AuditNet and
deduct 10 % from your total CD purchase. See www.pleier.com/pubs.htm
for details.
AuditNet is Free!
The way that AuditNet remains free to the global audit community is because it is supported by
sponsors. By supporting our sponsors you are supporting AuditNet and ensuring it's continued existence.
Please support our sponsors and help keep AuditNet a free resource to the global audit community. There are
many opportunities for corporations and vendors to sponsor the AuditNet site. Contact jmkaplan@ix.netcom.com by e-mail
for more information.
R.T. Edwards, Inc., the publisher of the Journal of
Forensic Accounting offers AuditNet user organizations the opportunity
to subscribe at the institutional rate. A sample article Black
Tech Forensics: Collection and Control of Electronic Evidence is
available for your review. For more information on the publication go
to the discounts
page.
Use
AuditNet to Plan Your Road Trip
Check
out the Audit Travel page and
make sure that your next business (or personal) trip you stay
at a Residence Inn.! Software piracy is at an all time
high. Check out the new Software
Compliance Auditing Page and PCProfile
for solutions that will help you minimize the risk of illegal
software on your company pc's.
Visit our sponsors and check out what
they have to offer!
Ergonomic
Solutions for Auditors
AuditNet welcomes Ourbod
Research Corporation as the newest addition to the Partner
Discount Program. Check out their listing for a special
offer to AuditNet users on their products.
Auditors
Sharing Audit Workpapers (ASAW)
ICQ's,
Checklists and Forms, OH MY!
In the spirit of continuing to offer
new free resources and tools to the global audit community, AuditNet
is now accepting contributions of internal control questionnaires,
audit checklists and standard forms that auditors use for
projects. The Auditors Sharing Audit
Workpapers Project provides you with the opportunity to share your
best practice standard forms with other auditors. Send your favorite
forms to jmkaplan@ix.netcom.com.
For more workpaper solutions for your
audit office check out the following AuditNet sponsors:
CAREER
TIPS FOR AUDITORS
Avoiding Common
Resume Blunders
by Robbie Miller Kaplan
Resumes get an initial quick scan and it's crucial to make it
through the all-important screening process. Beware of the following blunders if
you want to capture an employer's positive attention:
1. Resumes that are so general that the employer has no idea what
position you are seeking.
2. Resumes that are too long.
3. Resumes that include everything you have ever done, even if the information has no relevance to the job you are seeking.
4. Resumes that are tough to read because the font is too small,
little white space, paragraphs very thick, or too much graphics.
5. Resumes that are boring, read like a job description, and leave no
clue on what you contributed or accomplished.
6. Unfamiliar acronyms that confuse the reader rather than inform.
7. Resumes prepared with no consideration for the intended
audience.
8. Resumes written in the passive voice, using far too many words
and yet not quite getting your points across.
The AuditNet-L Newsletter includes career-related
tips from Robbie Miller Kaplan, author of Sure-Hire Resumes and Resume
Shortcuts. If you find these tips useful then check out the books! For
more career tips go Web site at www.job-resources.com.
Productivity
Tip:
Spreadsheet
Resources
The Internet continues to captivate me as I discover new pockets of
resources for auditors. When I was introduced to personal computers in
1987, WordPerfect and Lotus 1-2-3 were my favorite productivity
oriented applications. I introduced the benefits of spreadsheets to my
office as a way of selling the usefulness of computers. As useful as
spreadsheets were we needed a way to verify the information. Along
came Cambridge Spreadsheet Analyst and other spreadsheet audit tools.
Spreadsheets are still a useful tool for auditors and we still need a
way to verify formulas and spreadsheet data. Check out some of the
resources in this months AuditNet-L. While the Net remains a constant
source of information on this subject don't overlook text
publications. For instance check out a new book called Troubleshooting
Excel Spreadsheets by Laurie Ann Ulrich.
. If you have favorite spreadsheet resources send them to me
for a future tip column.
For more
productivity tips order a copy of The Auditor's
Guide to Internet Resources 2nd Edition from the IIA.
AuditLeverage:
A Users Perspective
"Being a one-person internal audit department for a
bank, I need all the help I can get to streamline paperwork. The
AuditLeverage software program gives me more time to spend
actually performing audits, and less time on paperwork.
AuditLeverage is flexible, and can be customized to virtually
any auditing application. I can use as much or as little
information as I need. It allows me to organize each project in
whatever way is most convenient for me. I can keep track of
findings, recommendations, comments, risk levels, or any other
bits of information I need. Then, when it's time to generate the
audit report, it incorporates all that information into the
report. I can even link to other documents, like standard
operating procedures or policy manuals. AuditLeverage also saves
time, money and space by enabling me to store information for
several years, then retrieve it quickly and easily.
This software has made my job much easier!
Deb Zander
Great Basin Bank of Nevada
dzander@greatbasinbank.com
Watch next month's newsletter for another users experience with
AuditLeverage.
KnowledgeSpace®
Internal Audit and Risk Management Community
Auditors have a lot on their plates. Staying on top of emerging
risks, managing knowledge, developing work programs and audit plans,
surveys and tools, and keeping up their own professional development.
Arthur Andersen's KnowledgeSpace® website helps with all these
responsibilities. Auditors use the site to do research and to save
time. They follow weekly articles on business risk, download templates
tools, work programs, models, and checklists, learn new approaches
from profiles of other departments and access customized news.
KnowledgeSpace®
can be a valuable time saver and toolbox for any auditor. Free
trials are available. Remember to mention that you saw it on AuditNet.
Special Discounts Exclusively for Auditnet Members!
Click on www.thompson.com/auditnet
to learn about Thompson, its publications and how to save up to 20
percent on these valuable services. You can also call Thompson's
customer service number 1-800-677-3789 for more information. Be sure
to mention the Auditnet priority code CN691064 when ordering.
Auditing AuditNet: A
Historical Perspective and The Stats
Just
how big is AuditNet and what statistics do you have to support
your claims? When I began building the AuditNet, I maintained
that if I built it auditors would come. What started in
August 1994 as a one page list of 10 resources has mushroomed
into the oldest and most comprehensive free site for the global
audit community. While I have been reluctant to provide numbers
because, in my opinion, outcomes are what counts, I have decided
to play the numbers game and provide the information for the
curious. There are a number of statistics that I gather on a
monthly basis. For example the following statistics are as of
March 31, 2001:
AuditNet-l e-mail subscribers 2,765
AuditPrograms-l discussion list subscribers 475
Total resources in KARL - 1,097
Number of pages in KARL- 101
Number of audit programs in the inventory:
Management and Financial - 143
Local Government -14
Spanish - 2
I.S. Audit Programs - 56
Mainframe and Technical Audit Programs - 67
In addition, the following information comes
from the March 2001 Web Trends report. Each month I generate
a report that provides this information and much more. The
statistics provided help me to mange the site. If you
are interested in reviewing the reports, they are available at www.auditnet.org/report.
While all these numbers may interest the curious
few the bottom line is that AuditNet is dedicated to maintaining
and providing this clearinghouse of information for the benefit
of the global audit community. I am constantly asked by
auditors how they can help in this effort. My response is to
contribute and share in AuditNet's philosophy of Auditors
Sharing Knowledge (ASK) for Progress.
General
Statistics
Hits
Entire
Site (Successful)
723,302
Average
Per Day
23,332
Home Page
22,576
Page
Views
Page
Views (Impressions)
132,313
Average
Per Day
4,268
Document
Views
127,886
Visitor
Sessions
Visitor
Sessions
46,717
Average
Per Day
1,507
Average
Visitor Session Length
00:10:18
International
Visitor Sessions
17.12%
Visitor
Sessions of Unknown Origin
30.53%
Visitor
Sessions from United States
52.34%
Visitors
Unique
Visitors
17,679
Visitors
Who Visited Once
12,514
Visitors
Who Visited More Than Once
5,165
This section represents only the additions and changes to Kaplan's
AuditNet Resource List (KARL) for last month. Regular users of KARL
should check this section for updates to previous postings and new
additions.
KeyAudit
is a free Software Audit Tool that determines the status of Software License
Compliance. Downloads available for Windows and Mac.
Key Server License
Management Web site provides software license management solutions for
organizations. Site includes articles about software licensing, product
information and a free software audit tool that determines the status of
Software License Compliance
PC Profile
provides PC and desktop coverage for issues related to PC usage and software
management. The site has links to free tools, PC audit tools, articles and much
more. (Product discounts available for AuditNet users).
Software
Compliance Auditors Toolkit CD-ROM based toolkit for auditors, managers
and accountants to do a thorough desktop audit, on demand, of any PC with a
fitted or external CDROM, to IDENTIFY what is installed on that specific PC.
(Discount available for AuditNet users).
Spreadsheet
Detective is a financial audit error Excel add-in and Euro
conversion tool. A free evaluation copy is available for download from the site.
Spreadsheet
Audit Tool Web site provides free add-ins for Excel including
formlist a simple auditing tool that adds procedures for displaying the formula
of selected ranges.
Spreadsheet
Risks Web site is devoted to issues around spreadsheet standards for
design, development and audit. Contains links to spreadsheet auditing tools.
Control Self Assessment Resource Center (www.jhw.com/~jhw/csa/)
Credit Union Internal Auditors Mailing List
Corruption Prevention Forum Web
Cybercop Home Page
Information Professionals Network (IPN)
Please let us know of links that are not
working!
For a free subscription to AuditNet-L,
which includes the monthly update to Internet Resources for auditors,
send an e-mail to imailsrv@list.auditnet.org;
All rights reserved. No part of this
Website may be reproduced in any form, by copying from the Internet, photostat,
microfilm, xerography, or any other means, or incorporated into any information
retrieval system, electronic or mechanical, without the written permission of
the copyright owner.