|
|
The Audit Report is our most important product. For most people, it's the only product they ever see. Our goal is to make it accurate, clear, and concise and distribute it timely.
The format of our report has changed over time. We continue to strive to improve it for our customers.
Every audit report contains these sections:
This section briefly describes the process, department, application, contract, or area audited. Our goal is to provide enough information so that a reader who is unfamiliar with the audited entity can understand the basic audit situation.
Included in this paragraph is a brief description of audit purpose and procedures and the degree of audit work performed. If the audit scope did not include a function or area that is an integral part of the entity audited, we will note the exclusion in this paragraph. Every full-scope audit includes our
C.A.R.E.S. audit objectives.
This section summarizes the management action plans. This area of the report will include an expression of opinion on the effectiveness of the system of internal control. Also, we often include a summary of positive comments noted during the audit.
We've divided our audit opinions into the categories as shown below:
- "The X. Department's system of internal control is effective."
Effective opinions are reported when we perform an audit and there are no detailed comments to report.
- "The X. Department's system of internal control is effective except as noted in our detailed audit comments."
Effective except as opinions are reported when the audit or review finds effective overall control but detailed comments for improvement are included.
- "The X. Department's system of internal control ensures compliance, reliability of information, accomplishment of objectives and the safeguarding of assets. However, the Department's system of internal control does not ensure economic and efficient use of Company resources. As explained in the detailed audit comments, management has not established cost control systems for measuring product costs..."
We report not effective opinions when the auditor concludes there are major control deficiencies in one or more of the scope objectives. These control deficiencies must have a significant impact on operations.
This section contains details about each improvement opportunity included in the report. Each comment includes these elements:
- Standards - Acceptable criteria used by the auditor to measure performance and evaluate controls. Standards may have already been established by management, such as written policies, procedures and rules. Where standards do not exist, the auditor must determine reasonable standards and seek agreement with them by the customer.
- Conditions - Concise description of what we found and the audit procedures and samples used by the auditor. The customer must agree with the facts presented.
- Cause - The underlying reason the standards were not met. The auditor should always attempt to determine the root cause of the deviation. Otherwise, our recommendation may address only the symptom and not the problem.
- Effect - Answers the "So what!" question. We must demonstrate the consequences of conditions which do not meet standards. The consequences should be significant - not merely some deviation from a procedure. Effect is what persuades the customer of the need for corrective action.
- Management Action Plan (MAP) - Presents the mutually agreed upon action that management will take. The MAP is the joint effort of the audit team and the management taking action.
We address audit reports to the manager responsible for the entity or function being audited. The object is to address the report to the lowest management level at which authority is sufficient to implement the management action plans.
We send copies of the audit report up through the customer's chain of command to the president of the company involved. Distribution of other copies are made as directed by the Director - Audit Services.
|
|