"PricewaterhouseCoopers
TeamMate is a database-driven audit management system that streamlines
the audit process by providing integrated tools for documentation, report
generation and file sharing."
Search the Net:
Search WWW
Search www.auditnet.org
The Auditor's Guide to Internet Resources, 2nd Edition
Available!
The
Internet is revolutionizing just about every sector of life it touches
commerce, communications, education and the media. For internal
auditors, it presents an invaluable resource to those who know how to
use it.
The
Auditor's Guide to Internet Resources, 2nd Edition is
the only book on the Internet written expressly for internal auditors.
Expanded and updated to include the latest Internet trends and
resources, the book provides all the Internet competency skills
auditors need to become digitally literate. Order
your copy now! Call 877-867-4947 (Toll free in U.S. and
Canada) or FAX 770-442-9742 or email
iiapubs@pbd.com
Use Order Number KPR320 and receive the IIA member price. It pays to
use AuditNet!
Now
Available on CD-ROM!
Without the
support of our sponsors, AuditNet would not be possible. Please
show your support by visiting their sites and evaluating their
services.
AuditNet
Exclusive!!!!
Software Compliance
Audit Tip
This article written
exclusively for AUDITNET.ORG
by: PCProfile
Rob Harmer Consulting Services Pty Ltd
Have a think about the following
statement.....................
Whilst you are busy reading this
web page and listening to music via one of the many popular music file
sharing programs (remember you agreed to file share so you could
access Napster etc) then you may have had files copied, or lifted, or
deleted, or altered, from "right under your nose"!
If you aren't interested, then just
continue on listening to MP3 files, but be aware that you may also be
unloading your credit card and bank account details, corporate
information, trade details, sensitive details, intellectual property
and so on with whoever wishes to extract them from your PC right under
your nose, whilst you enjoy your music!
It's a FACT - File sharing is
here to stay!
The Application Service Provider (ASP) market
model is based on "renting software and services" across the
web. The Microsoft NET model is based on the same approach and the
HailStorm technology they announced recently confirms this view.
The ASP model has had some nervous starts with some failed service
providers already and many Information Technology Professionals are
very nervous about using software "over the web" as a means
of running the business. This article is not about ASP
activities BUT about the wider issues and risks of FILE SHARING!
There are File Sharing software web located
services already on offer that allow Peer to Peer (p2p) file sharing
of much more than you might be comfortable with! In fact they
are becoming very attractive web sites as everybody loves FREE
software! see: http://www.auditnet.org/articles/have_you_been_napstered.htm
HOWEVER some of the software at these sites
offers access using file sharing techniques to not only MP3, and
Sounds, Images, etc BUT ALSO executable files, documents, spreadsheets
etc TO ANY user who cares or can locate an OPEN share on a PC based
system.
The threat here is ENORMOUS in piracy, theft of
corporate or private data and the risk is rising daily!
What sort of files can be accessed using specialist file sharing
software?
They could be any one of the following:
music
images
documents
text
executable files
passwords
credit card details
bank account details
customer details
corporate documents
corporate spreadsheets
intellectual property
new technologies
R&D details
personal records
Basically it can be any kind of file, application or
corporate sensitive information that is stored and saved on the
local hard drive or network drive where the "share" has
granted (unwittingly) open access to other unseen users across the
Internet! The most extensive capability is located at ShareSniffer
located at http://www.sharesniffer.com
who have come up with a technique
for a trademarked product for a fee that allows you to DETECT open
shares on any PC on the Internet and then copy/download/execute that
file without the end user knowing.
This means if your open PC on the www has a share that is locatable
then they have access to your data etc. If you are a home user the
biggest risk is your credit card and bank account details.
Of course, they have to have "intent" to grab your
details - BUT can you afford the risk?
(PC Profile offers a free
25 user software
compliance message reminder software).
For more details for these and other resources visit
http://www.pcprofile.com/
To access the programs in other formats go to www.auditnet.org
and click on Audit Programs.
New
Additions to the Requested Audit Programs
The following items were added to the
Clearinghouse of Requested Audit Programs. If you have
an audit program that meets one of the requests,
please send it to jmkaplan@ix.netcom.com
in the interest of "electronic progress through sharing."
Employee Stock Purchase Plan
To see the other audit programs that auditors are looking for, go
to www.auditnet.org
and scroll to the bottom of the page.
New
Publication Offers a Discount to AuditNet Users
White-Collar Crime Fighterwww.wccfighter.com
the only source of exclusive, authoritative "how-to"
information for financial crime fighters offers AuditNet users a
discounted subscription rate of $77-- a savings of $20 off the regular
rate.
AUDITNET JOB LISTINGS
(& MORE)
Looking to make a career change? Go to AuditNet's Audit Jobs
section for the latest job opportunities. 24 hours a day, 7 days a
week you have the ability to not only look at available jobs, but you
can also post your resume, apply for open jobs, research companies and
obtain career advice. If you are in the market for a new job, make
AuditNet your first stop to check out what's available.
This is just another benefit of using AuditNet as your one stop
shop for all your audit and career resources.
Let us know how you like the new format for Audit Jobs by sending
an email to the editor@auditnet.org
Be
prepared when the software police come knocking on your door!
AuditNet
Users Save $200 - Save $$ and get legal! Check
it out!
Internal Auditor Toolkit Available!
Michael Lapelosa, CISA, CFE, Audit Director for Group Health
Incorporated (GHI) and a former president of the New York chapter of
IIA, recently authored a 2 hour presentation on CD titled
"Internal Auditor Toolkit".
This 2-hour training CD is available at $150 - mention AuditNet and
deduct 10 % from your total CD purchase. See www.pleier.com/pubs.htm
for details.
Employers
Seeking Audit Candidates?
Looking to fill an audit position for your
organization?
Consider using the AuditNet Audit Jobs area. The
page provides exposure to over 17,000 audit professionals every month
from all over the world. The Jobs page receives between 3000-4000 hits
per month. The cost is low. Tell your HR department about using this
option when you are looking for audit candidates. Go to the AuditNet
home page at www.auditnet.org
and click on Audit Jobs. Click on Post Jobs for posting information.
R.T. Edwards, Inc., the publisher of the Journal of
Forensic Accounting offers AuditNet user organizations the opportunity
to subscribe at the institutional rate. A sample article Black
Tech Forensics: Collection and Control of Electronic Evidence is
available for your review. For more information on the publication go
to the discounts
page.
Use
AuditNet to Plan Your Road Trip
Check
out the Audit Travel page and
make sure that your next business (or personal) trip you stay
at a Residence Inn.! Software piracy is at an all time
high. Check out the new Software
Compliance Auditing Page and PCProfile
for solutions that will help you minimize the risk of illegal
software on your company pc's.
Visit our sponsors and check out what
they have to offer!
Ergonomic
Solutions for Auditors
AuditNet welcomes Ourbod
Research Corporation as the newest addition to the Partner
Discount Program. Check out their listing for a special
offer to AuditNet users on their products.
Auditors
Sharing Audit Workpapers (ASAW)
ICQ's,
Checklists and Forms, OH MY!
In the spirit of continuing to offer
new free resources and tools to the global audit community, AuditNet
is now accepting contributions of internal control questionnaires,
audit checklists and standard forms that auditors use for
projects. The Auditors Sharing Audit
Workpapers Project provides you with the opportunity to share your
best practice standard forms with other auditors. Send your favorite
forms to jmkaplan@ix.netcom.com.
For more workpaper solutions for your
audit office check out the following AuditNet sponsors:
CAREER
TIPS FOR AUDITORS
Making the Most of
Your References
by Robbie Miller Kaplan
I recently worked with a client and we prepared a wonderful resume
that clearly demonstrated his qualifications for the positions he
sought. Just as we finished he said, "Now if I can only get an
employer interested enough to call my references so they can tell them
just how qualified I am for the job."
If you think it is your reference's responsibility to sell you to
prospective employers, you will be searching for a job for a long
time. It is solely the job seeker's responsibility to toot their horn
and verbally persuade an interviewer that their credentials clearly
match the job requirements.
Most prospective employers will expect you to bring to the
interview a list of three professional references. These individuals
should be aware of your job performance and can personally attest to
your qualifications. Here are some tips on making the most of your
references:
1. Call your references and ask permission to use them.
2. Obtain their current work phone number, job title, employer, and
address.
Confirm the correct spelling of their name.
3. Send them a copy of your most recent resume to refresh their memory
of your work history and to identify your job/career objective.
4. Prepare a typed list of your three to five references using
their name, their job title and employer, work address, and phone
number. Some job seekers use the work and home phone numbers of their
references.
5. If the individual no longer works for the organization where
they knew of your performance, you might want to state formerly
Controller, ABC Corporation with their current phone numbers and work
address.
6. Follow up with your references to keep them posted on how your
search is proceeding and letting them know positions and organizations
of interest.
7. Send follow-up letters at the end of your search, thanking your
references for your support and updating them on your current
position.
The AuditNet-L Newsletter includes career-related
tips from Robbie Miller Kaplan, author of Sure-Hire Resumes and Resume
Shortcuts. If you find these tips useful then check out the books! For
more career tips go Web site at www.job-resources.com.
Productivity
Tip:
Netiquette for Using
Discussion Lists
The auditprograms email discussion list recently experienced a
problem with some subscribers send an unsubscribe message to the wrong
address. It generated a great deal of unnecessary email and a lot of
upset list subscribers. Patience is one thing that all auditors new to
the Internet need to have. One of the rules of Netiquette for mailing
lists involves knowing when to use the list address vs. when to use
the listserve address. Even more important is learning how to read and
follow instructions when using a media that you are unfamiliar
with.
The listserve address is the one that handles all the
administrative tasks of the list including subscribing and
unsubscribing. For AuditNet users the listserve address is imailsrv@list.auditnet.org
and this is the address where all administrative mail should be sent.
The list address is the address that subscribers send messages for
distribution to all the other list subscribers. So when someone send
an unsubscribe message to the list address all the subscribers receive
that message. If you are unsure where to send your unsubscribe message
then email me directly at editor@auditnet.org
The most important thing to keep in mind when dealing with the
unfamiliar is to follow instructions. There are many places on the
AuditNet site that provide the instructions for the discussion lists.
A little bit of email netiquette goes a long way to making for a
positive experience!
For more
productivity tips order a copy of The Auditor's
Guide to Internet Resources 2nd Edition from the IIA.
AuditLeverage:
A Users Perspective
Audit Leverage Efficiencies
After a two-day on-site, interactive training course, we were
ready to begin using Audit Leverage to reduce audit
administrative time. While we are still on a learning curve, we
have some significant efficiencies:
Reduce administrative time for organizing repetitive, large
audits: We audit part of our customer service center (CSC)
operations, twice-yearly, for about four months staff time per
audit. Even though we had used proforma audit workpapers
constructed in MS Excel and Word, we still (previous to Audit
Leverage) had to print EACH workpaper, label it, hole-punch it,
file it, and cross-reference it. If a workpaper changed, the
process repeated itself. With Audit Leverage, we input our audit
program ONCE, and electronically link our workpapers to each
program step. Workpaper changes are reflected electronically,
and the workpaper referencing feature simplifies labeling.
For future CSC audits, we'll just roll the audit program and
workpaper template over into them, which is a significant
reduction of previous duplicative, non-value-added effort.
Managing the Time Budget: The time-management system helps me
to ensure that staff are completing audit steps within budgeted
hours. Having the time system linked to Audit Leverage project
numbers, and being able to print off comparison to budget versus
actual hours, are handy features. My staff and I have to input
information only once, as opposed to multiple times (as with a
stand-alone time system).
Reviewing Audits: Since nearly all of the workpapers we use
are now electronic, reviewing them is much easier. Where we had
three to four 3" binders in the aforementioned audit, we
will have one, 1" binder of paper. The review note feature
of Audit Leverage provides an easy means to write review
comments, and to clear them. I also use the electronic review
notes when preparing staff evaluations, without having to find
manual paper files.
These are some of the features we're currently using. I
anticipate that later in the year, we will begin using the risk
assessment module and the audit point follow up features as
well.
Al Carpenter
Director of Internal Audit
Virginia Department of Motor Vehicles
Watch future newsletter for another more user experiences with
AuditLeverage.
KnowledgeSpace®
Internal Audit and Risk Management Community
Auditors have a lot on their plates. Staying on top of emerging
risks, managing knowledge, developing work programs and audit plans,
surveys and tools, and keeping up their own professional development.
Arthur Andersen's KnowledgeSpace® website helps with all these
responsibilities. Auditors use the site to do research and to save
time. They follow weekly articles on business risk, download templates
tools, work programs, models, and checklists, learn new approaches
from profiles of other departments and access customized news.
KnowledgeSpace®
can be a valuable time saver and toolbox for any auditor. Free
trials are available. Remember to mention that you saw it on AuditNet.
Special Discounts Exclusively for Auditnet Members!
Click on www.thompson.com/auditnet
to learn about Thompson, its publications and how to save up to 20
percent on these valuable services. You can also call Thompson's
customer service number 1-800-677-3789 for more information. Be sure
to mention the Auditnet priority code CN691064 when ordering.
AuditNet is Free!
The way that AuditNet remains free to the global audit community is because it is supported by
sponsors. By supporting our sponsors you are supporting AuditNet and ensuring it's continued existence.
Please support our sponsors and help keep AuditNet a free resource to the global audit community. There are
many opportunities for corporations and vendors to sponsor the AuditNet site. Contact jmkaplan@ix.netcom.com by e-mail
for more information.
Be
prepared when the software police come knocking on your door!
AuditNet
Users Save $200 - Save $$ and get legal! Check
it out!
Auditing AuditNet: A
Historical Perspective and The Stats
Just
how big is AuditNet and what statistics do you have to support
your claims? When I began building the AuditNet, I maintained
that if I built it auditors would come. What started in
August 1994 as a one page list of 10 resources has mushroomed
into the oldest and most comprehensive free site for the global
audit community. While I have been reluctant to provide numbers
because, in my opinion, outcomes are what counts, I have decided
to play the numbers game and provide the information for the
curious. There are a number of statistics that I gather on a
monthly basis. For example the following statistics are as of
April 30, 2001:
AuditNet-l e-mail subscribers 2,933
AuditPrograms-l discussion list subscribers 464
Total resources in KARL - 1,113
Number of pages in KARL- 101
Number of audit programs in the inventory:
Management and Financial - 144
Local Government -15
Spanish - 2
I.S. Audit Programs - 59
Mainframe and Technical Audit Programs - 68
In addition, the following information comes
from the April 2001 Web Trends report. Each month I generate
a report that provides this information and much more. The
statistics provided help me to mange the site. If you
are interested in reviewing the reports, they are available at www.auditnet.org/report.
While all these numbers may interest the curious
few the bottom line is that AuditNet is dedicated to maintaining
and providing this clearinghouse of information for the benefit
of the global audit community. I am constantly asked by
auditors how they can help in this effort. My response is to
contribute and share in AuditNet's philosophy of Auditors
Sharing Knowledge (ASK) for Progress.
General
Statistics
Hits
Entire
Site (Successful)
704,031
Average
Per Day
23,467
Home
Page
21,758
Page
Views
Page
Views (Impressions)
140,446
Average
Per Day
4,681
Document
Views
135,289
Visitor
Sessions
Visitor
Sessions
43,228
Average
Per Day
1,440
Average
Visitor Session Length
00:10:30
International
Visitor Sessions
16.94%
Visitor
Sessions of Unknown Origin
32.69%
Visitor
Sessions from United States
50.35%
Visitors
Unique
Visitors
17,171
Visitors
Who Visited Once
12,152
Visitors
Who Visited More Than Once
5,019
This section represents only the additions and changes to Kaplan's
AuditNet Resource List (KARL) for last month. Regular users of KARL
should check this section for updates to previous postings and new
additions.
Sampling
Methodologies from the Comptroller of the Currency provides an
excellent guide to methods, plans and procedures.
Sampling
Plans Web site for a software vendor provides a tutorial on
sampling, a best practices area, software area and discussion forum area.
Modifications:
Resources No Longer Available
Please let us know of links that are not
working!
For a free subscription to AuditNet-L,
which includes the monthly update to Internet Resources for auditors,
send an e-mail to imailsrv@list.auditnet.org;
All rights reserved. No part of this
Website may be reproduced in any form, by copying from the Internet, photostat,
microfilm, xerography, or any other means, or incorporated into any information
retrieval system, electronic or mechanical, without the written permission of
the copyright owner.