|
|
|||||||||
|
|
||||||||||
|
|
The Global Privacy and Information Security Landscape – Frequently Asked Questions
As the world becomes increasingly connected, it is critical to view information security and privacy not merely as IT issues, but also as essential business priorities. Security threats, vulnerabilities and privacy exposures challenge every organization today, creating risks that must be controlled and managed. Often organizations do not know what risks they face or how they will manage these risks. If managed properly, recognized leadership in handling personally identifiable information and driving personalized service can be a differentiator to consumers and partners and become a driver of business growth.
With this in mind, Pillsbury Winthrop Shaw Pittman LLP and Protiviti Inc. have pooled their areas of expertise to co-author, The Global Privacy and Information Security Landscape: Frequently Asked Questions. Pillsbury provides legal overviews and insight regarding current laws and regulations, and Protiviti offers guidance to implement and maintain an effective privacy and information security program from an operational perspective. Information security and privacy are global concerns, and thus there are many laws and regulations in countries around the world designed to protect or limit the rights of individuals and businesses. This FAQ guide discusses key laws and regulations, including the Gramm-Leach-Bliley Act, the Health Insurance Portability and Accountability Act, the Fair Credit Reporting Act, the European Union General DP Directive, and the Electronic Communications Privacy Act. Among the many topics addressed are privacy trends, security breaches, privacy programs, international laws and guidance for victims of identity theft. Note that the topics discussed in the first seven sections of this guide are based primarily on U.S. requirements and industry standards, although many of the principles and leading practices considered therein may be applicable internationally as well.
This guide is provided for general information only; it is not intended to give legal analysis or advice. If legal guidance is desired, companies should consult legal counsel or other appropriate advisers who can best address specific questions as they relate to their unique circumstances. Given that the risk landscape is dynamic, and information and privacy concerns are likely to undergo significant changes in the coming years, many of the responses in this guide will evolve accordingly. As organizations strive to manage these risks, we hope this FAQ guide will prove to be a valuable resource.
Click here the rest of the story!
This article was contributed by Protiviti KnowledgeLeader, an online service providing tools, templates, and other resources for internal audit and risk management. Free trials available at www.knowledgeleader.com.
Recession Special! Get 10% off AuditNet® Community Sponsor News!
Thanks to ACL, CCH TeamMate and ThomsonReuters for sponsoring the newsletter! Whistleblower Hotlines and SOX
The Sarbanes-Oxley Act of 2002 stated that in order for companies to continue being listed on the various exchanges (as per the SEC), they must establish a way for boards of directors to receive, retain and treat complaints regarding accounting, internal accounting controls or auditing matters. This process must be secure and allow for anonymity.
If you want to know how to set up a whistleblower hotlines consider purchasing the recording for the Essentials of Effective Whistleblower Hotlines Webinar held on July 14, 2010.
Industry Leadership Opportunity
AuditNet and RuleSphere invite public comments and commitments of support regarding our Global Audit Advisory industry initiative described herein. This document describes the industry boards that manage and oversee the industry requirements across the broad market segment known as Governance Risk Compliance (GRC). It is these GRC requirements that now make up AuditNet’s Audit Work Programs (AWPs).
For details please click here!
The theme of this month's newsletter is Sarbanes-Oxley Now and you will find articles and links to resources focused on that subject. Next month's theme is Technology-CAATTs. If you have an article or resource on the theme please send it along to the editor.
Remember! Clicking on sponsored ads and visiting their sites helps support AuditNet®. AUDITNET® SURVEYS
AuditNet Survey August 2010 Fraud Risk Assessments and Internal Audit
In the words of the legendary Bob Dylan; The times they are a changing". At one time, it was not directly an auditor's responsibility to detect fraud, and even professional standards avoided the word "fraud." Today, standards have recognized the auditor's role in fraud detection and mitigation. In January 2009 the Institute of Internal Auditors updated their professional standards (International Professional Practices Framework-IPPF) and defined internal audit's responsibility in fraud prevention and detection. In December 2009 the IIA released a practice guide (Internal Auditing and Fraud) to help auditors meet their new role. According to the guide "A fraud risk assessment is often a critical component of an organization’s larger enterprise risk management program".
This survey seeks to determine whether internal auditors incorporate fraud risk assessments in their work along with other information related to detecting and preventing fraud. (Preliminary results will be shared at the August 10 Fraud Risk Assessment Webinar)
If you have questions about this survey or would like more information about AuditNet contact us at webinars@auditnet.org or visit (http://www.auditnet.org)
Previous Surveys
Auditors Role in Fraud Detection Sarbanes-Oxley and Internal Audit
AuditNet® What's New This Month?
New book series will help you communicate with colleagues and clients going through difficult life experiences!
From the Editor!
Free Reports!
AuditNet begins adding new content to the Basic Subscription Level
Effective September 1, 2009 AuditNet begins adding new content to the basic subscription level. This increases the value of the basic level as content for this section has not changed since 2006. We added CICS Essentials Auditing CICS A Beginner's Guide and a Signature Authority Matrix Template. Watch for new additions each month!
AuditNet has established new networking opportunities for auditors through social networking sites such as LinkedIn, Google Groups, Ning and more. LinkedIn's Professional Audit Information Network has over 2,700 members. What a great tool which includes group discussions, news and the opportunity to network with other professionals around the world!
AuditNet is currently building fraud analytics into audit work programs to provide auditors with a new tool for compliance with the standards. We will also be working on a monograph on Building Fraud Detection into the Audit Process.
New audit programs are also now available. Subscribers may access these documents now.
AuditNet articles will now include the ability to provide feedback and comments. We are looking at a way to rate audit programs as well. Stay tuned!
AudiTalk, AuditNet's redesigned free discussion forum site went active February 1 with many new categories. Visit the new forum, register and begin sharing with your peers. The forum is moderated so no spammers are allowed.
AuditNet is working on several fronts to enhance the audit programs and incorporate audit content into other software applications. One of these applications will offer Software as a Service (SaaS) solutions to requirement management. AuditNet has always supported new solutions and has encouraged start ups and other software vendors to enhance their products for both the mainstream as well as the small internal audit functions. We will continue to seek out opportunities that offer the global audit community new ways of doing business. Writing for AuditNet? AuditNet Editorial Guidelines Based on the number of articles being contributed to AuditNet we have developed editorial guidelines for future submissions. If you are planning to write an article please review the guidelines before submission. We appreciate receiving material from the global audit community in the interest of sharing knowledge. We are also in the process of guidelines for book reviews and other material submitted for inclusion on AuditNet.
New Benefits of Registration AuditNet continues to forge new relationships with professional associations and audit and accounting sites to provide auditors with access to audit work programs.
Group Access to AuditNet Audit Programs.
Join the other groups such as ACL, CCH TeamMate, Protiviti KnowledgeLeader and the Association of Healthcare Internal Auditors that have access to all of the AuditNet audit programs.
If you want your group or professional association (IIA, ISACA, ACFE, ACUA, ACUIA etc) to have transparent access to AuditNet audit programs and other content as a benefit of membership contact your professional association official or group leader and ask them to pursue this with AuditNet. Fraud News Feed Go to the AuditNet Fraud Resource Center and check out the fraud news feed to keep up to date with media reported fraud happenings.
The best way to find all the resources on the site is by going to the AuditNet Library or use the site search.
|
|||||||||
Establishing
a whistleblower hotline, (also known as an ethics hotline or tips hotline)
to allow employees to anonymously communicate fraudulent or other
inappropriate activity without fear of retaliation can contribute directly
to your bottom line as well as improve employee morale. Auditors should
consider using a third-party professional to operate the whistleblower
hotline and avoid the time, processes and costs associated with setting up a
self managed system. Employees are much more likely to use a third-party
hotline because of the comfort of confidentiality. 
|
Federal Judge Denny Chin, when sentencing disgraced financier Bernard
Madoff to 150 years in prison for possibly the largest fraud ever,
called his crimes “extraordinarily evil.” Madoff said in court that he
lived “in a tormented state now, knowing all the pain and suffering that
I’ve created. I’ve left a legacy of shame.” But he left much more than
that – depleted pensions, bankrupt nonprofits, and destroyed lives. And,
sadly, much of that could have been prevented.
H. David Kotz, inspector general for the Securities and Exchange Commission, wrote in his Aug. 31, 2009 report on the SEC’s failure to uncover Madoff’s Ponzi scheme, that from 1992 to 2008 the SEC received at least six complaints that should have raised red flags. |
For the rest of the article from the latest ACFE Fraud Magazine click here.
This article is from Fraud Magazine, the professional magazine
of the Association of Certified Fraud
Examiners
ACFE FraudInfo Newsletter click here!
Coming Attractions!
A site redesign is in the planning stage. We are looking at migrating to the Microsoft.net platform which will facilitate maintenance and site look and feel while increasing security. We are also adding new programs to both the basic and premium content. The partnership with ACL will reap data analytic enabled audit programs. We will also be incorporating new content from other software vendors that will help users with data analytics and fraud.
AuditNet is working with professional associations to provide access to the audit program inventory. Stay tuned!
The AuditNet Monograph Series provides useful guides for all levels of auditors from juniors right up to audit directors. We are currently working on new guides for Sarbanes-Oxley, internal controls and Internet for auditors, Key Performance Indicators for Internal Audit, Business and Transaction Cycles and Digital Audit Knowledge Resource Guide. These guides will be available to registered subscribers. If you are interested in developing a monograph on a contract basis, contact us.
AuditNet® continues adding new specialized resources for auditors. Watch the newsletter and keep checking the Library page for updates and new resources.
Recovery Auditing: Reducing Profit Leaks
Read a review of Rich's latest book!
AuditNet® Software Compliance Audit Corner
Software Compliance audits from a CEO 30,000 foot perspective
Software auditing for software compliance has been conducted now for many years, but what we know about software auditing after being in the industry since 1991, is that they are often never completed, or are a stop start affair, due to being overtaken by more important events, and they generally generate large amounts of data.
For the rest of the story click here!
Global Audit Advisory for BioPharm
Industry News (Premium Subscribers)
Our Life Sciences industry cluster is now filling industry leaders and
providing training to
help us roll out the Global Audit Advisory (GAA) and the Industry Change
Control Board. If you have interest in becoming an “industry leader” please
contact Phil Wilson at
phil@rulesphere.com. Phil would also like to hear from you if you are
interested in the Cross-Industry cluster, the Insurance cluster, the Retail
Cluster, or the Public Sector Cluster. If you are not a part of any of
these, but would like to see your industry served with our unique GRC
requirements capabilities… please contact us. We’d be very interested in
helping you help us!
Beta Testing of GRC Convergence and Oversight Courseware Content (Premium Subscribers)
We are in the process of rolling out a complete curricula for GRC
Convergence and Oversight. Much of our educational content relates to audit
best practices. If you are a Premium subscriber and would like to sign up
for one of our beta seminars over the web at no charge, please contact Phil
Wilson at phil@rulesphere.com.
For more information click here!
Professional Networking Discussion Forums and More from AuditNet®
AuditNet.org is now on Facebook
Join AudiTalk the new AuditNet Discussion Forum
Join
The LinkedIn Professional Audit Information Networking Group
AuditNet Newsletter (monthly)
AuditNet® Vendor News
Check here for the latest news from our AuditNet® sponsors!
Audit Programs with TopCAATs Tests
The developers of TopCAATs, the flagship product of Reinvent Data are writing audit programs that include tests using their software. They have graciously offered to share these audit programs with AuditNet®. These will be added to the subscriber area as they become available.
According to Charlie Walker, the founder of Reinvent Data;
The idea behind these is to look for ways that TopCAATs can be integrated into the audit, and to provide our users with practical ideas of how they can use the TopCAATs tools. One of the challenges that we have noticed with the adoption of CAATs is the application of the tools – many users find it difficult to adapt existing methods to using CAATs because they don’t know which tools to use in which situation. So, we are looking for existing traditional tests that can be adapted/improved by the use of CAATs (and specifically which TopCAATs tools to use).
If you have not already tried out TopCAATs, you can download a 30 day free trial of TopCAATs. You can also get a 20% discount on the cost of TopCAATs licenses by using the voucher code AUDITNET09”
T&E Fraud: The Devil is in the Details
by Bethmara Kessler CFE, CISA
Managing Director
The Fraud and Risk Advisory Group, inc.
Whether times are prosperous or tough, most organizations fall victim to some sort of T&E fraud. The range of schemes and severity can vary significantly from business to business. However, almost every organization has at least one person who; mischaracterizes a personal expense as a business expense, or overstates an expense they paid for in cash. In some cases where internal controls are not perceived as strong, employees are bolder and submit fictitious expenses and multiple reimbursements.
Click here for the rest of the story!
Editor's Note: Next month's AuditNet Fraud Webinar is on Detecting and Preventing Fraud in T&E and P-Cards Using Data Mining! Sign Up Now!
AuditNet® Featured Books
The AuditNet® Audit Bookstore Corner
Looking for books on auditing related topics? We suggest using the AuditNet® bookstore. The bookstore focuses on Internal Audit but includes other related subjects as well. AuditNet® uses Amazon to power the bookstore so each purchase you make through this link helps support AuditNet®.
|
September 2010 Anti-Fraud Training
A September Trio of Essential Anti-Fraud Webinars: Critical Topics and Top Experts 9/15
T&E & P-Card Fraud
Using Data Mining
The September offerings in the fraud Webinar series will focus on three critical areas: T&E & P-card fraud (using data mining), healthcare vendor fraud and operations level anti-fraud controls.. These are part of two Webinar series covering fraud detection, prevention and audit in 12 critical areas and, how to efficiently and inexpensively detect fraud using today’s top audit automation tools with 5 focused Webinars. Following are links to the September offerings which will also link you to the two series with great values and low cost CPE by signing up for either the enterprise or individual licensing packages. If you are not interested in the packages you can pick and choose those that interest you. The package options will also provide you with access to the previous Webinars so you won't miss any of the important topics covered in these series!
Detecting and Preventing Travel & Entertainment and P-Card Fraud Using Data Mining (September 15, 2010, 11AM 1PM EDT)
Detecting and Preventing Healthcare Vendor Fraud, Wed., Sept. 22, 2010, 3PM – 4:15 PM Eastern and
Essentials of Effective Operations-Level Anti-Fraud Controls Sept. 29, 2010, 2PM-3:15 PM Eastern
Detecting and Preventing Fraud Using Data Mining Techniques CPE as low as $15.90/hr
Detecting and Preventing Fraud in Today’s High-Crime Climate CPE as low as $22.17/hr
Early Bird Pricing and Package Licensing Available NOW! Don't delay as these are limited time offers. New Webinars Announced for September
Detecting and Preventing Travel & Entertainment and P-Card Fraud Using Data Mining (September 15, 2010, 11AM 1PM EDT) and Detecting and Preventing Healthcare Vendor Fraud, Wed., Sept. 22, 2010, 2PM – 3:15 PM Eastern and Operations-Level Anti-Fraud Controls, Wed., September 29, 2010, 2PM-3:15 Eastern
AuditNet® and White Collar Crime Fighter/FraudAware are pleased to announce that the September Webinars are now open for registration. Sign up now for these limited seating events! The September offerings in the new fraud Webinar series will focus on two critical areas: T&E and P-card fraud (using data mining) as well as healthcare vendor fraud. These are part of two Webinar series covering fraud detection, prevention and audit in 12 critical areas and, how to efficiently and inexpensively detect fraud using today’s top audit automation tools with 5 focused Webinars. Following are links to the September offerings which will also link you to the two series with great values and low cost CPE by signing up for either the enterprise or individual licensing packages. If you are not interested in the packages you can pick and choose those that interest you. The package options will also provide you with access to the previous Webinars so you won't miss any of the important topics covered in these series!
Detecting and Preventing Fraud Using Data Mining Series- Travel & Entertainment and P-Card Fraud (September 15, 2010, 11AM 1PM EDT)
Detecting and Preventing Fraud in this
High Crime Climate Series -
Healthcare Vendor Fraud,
Rebecca S. Busch, the author of Healthcare Fraud Auditing and Detection Guide will be our guest speaker.
Detecting and Preventing Fraud in this High Crime Climate Series Essential of Operations-Level Anti-Fraud Controls, Wed., September 29, 2010, 2PM-3:15 Eastern.
Sign up for the entire Webinar series (you will have access to all the previous Webinars) If you are not interesting in all the Webinars in either series then just sign up for the ones that interest you. If they have already taken place you can still purchase the recordings and handout material by clicking here.
Detecting and Preventing Fraud Using Data Mining Techniques CPE as low as $15.90/hr
Detecting and Preventing Fraud in Today’s High-Crime Climate CPE as low as $22.17/hr
Protect Your Purchasing Cards with Data Analytics Practical advice to help organizations tackle fraud, waste and abuse
By Steve Biskie, CPA, CITP, CISA
Corporate purchasing cards have been steadily gaining popularity over the past several years – and with good reason. Purchasing cards (p-cards) can automate supplier payments, eliminate unnecessary paperwork and trim costs. But, p-cards also come with inherent risks for organizations large and small. Employees can be tempted to abuse p-card program controls and in extreme cases, commit sophisticated, high-level fraud.
For the rest of the story click here!
Editor's Note: Next month's AuditNet Fraud Webinar is on Detecting and Preventing Fraud in T&E and P-Cards Using Data Mining! Sign Up Now! AuditNet/FraudAware August 2010 WebinarFraud Risk Assessments, Tues., August 10, 2010, 2PM-3:15PM Eastern.
What you will learn:
Missed some of our excellent Webinars? You can now purchase the recordings including all the handouts. Visit the page with links to previous Webinars here.
AuditNet®
Helps Auditors Who Have Been Impacted by the Global
Economic Crisis
According to a study by the Institute of Internal Auditors late last year, staffing of internal audit departments was hit hard by the recession. This year looks like it will be better for internal auditors. There is always a lag in jobs as the economy rebounds however some auditors may have to wait longer to find positions. In light of this AuditNet® is offering a free subscription for those auditors affected by the economic crisis. All that we ask is that those taking advantage of this offer give something back by sharing their knowledge. AuditNet® will also pay auditors for original content such as audit work programs, checklists, control matrices, data analytic scripts etc. If you are an auditor who has been outsourced, been laid off then contact us to take advantage of this offer. Send your email to info@auditnet.org. Navigating GRC and Audit
Lee Dittmar, Global Practice Leader, GRC
Interested in Writing for AuditNet? Looking for a Columnist for GRC If you have an interest in governance, risk and compliance and would like to share your experience with the AuditNet community let us know. We are looking for a features columnist for this section. Internal Auditing and Fraud
AuditNet is developing a Fraud Audit Library (FAL) of resources for auditors. The FAL will be available to subscribers (Premium Level) and will consist of documents providing fraud scenarios, red flags and audit procedures as well as fraud policies, Webinars, PowerPoint presentation, guides and more. Following are some of the e-monographs we are planning:
If you would like to participate in sharing your resources for this section of AuditNet let us know and you will be provided with a Premium subscription. More Webcasts and Webinars for Auditors
Fraud Webinars You Missed:
Missed the above events? You can now purchase the recorded events and slides.
Risk Management from Strategy to Success: ERM and the Auditors Role AuditNet and Fulcrumway Feb. 23, 2010.
Risk Management and the Financial Crisis – What Audit Has Learned and How Technology Can Help (Webinar Replay)
Fraud Detection and Prevention: Protecting Your Assets, Your Integrity and Your Future (Webinar Replay)
What's New at AuditNet®
August 1, 2010 (Oakton, Virginia)
AuditNet® posted a spreadsheet to help auditors make an
informed decision in purchasing audit management
software. We have also developed draft monographs for
Fraud and Waste Indicators and Fraud Detection and
Prevention Best Practices. We are working on Fraud and
Internal Controls
July 1, 2010 (Oakton, Virginia) Working on a monograph to be available for premium subscribers and attendees of the Essentials of Effective Whistleblower Hotlines Webinar on July 14. The monograph will include a sample whistleblower policy and more.
June 1, 2010 (Oakton, Virginia) AuditNet and FraudAware launch two new fraud training opportunities via Webinars. Detecting and Preventing Fraud Using Data Mining Techniques and Detecting and Preventing Fraud in Today’s High-Crime Climate provide unique training opportunities without travel with low cost per CPE credit and added bonuses.
May 1, 2010 (Oakton, Virginia) RuleSphere has begun selecting candidates for the AuditNet joint venture Global Advisory Panel on GRC Requirements Management and launches training.
May 1, 2010 (Oakton, Virginia) AuditNet releases the AuditNet Guide to Detecting Financial Statement Fraud in conjunction with the Webinar scheduled later this month. All attendees will receive the e-monograph and Introduction to Fraudulent Financial Reporting from White Collar Crime Fighter.
March 1, 2010 (Oakton, Virginia) If you are an auditor affected by the global economic crisis, AuditNet offers some relief. We launched a new program that provides auditors with free access to AuditNet content during their job search. See the details in the newsletter article.
March 1, 2010 (Oakton, Virginia) AuditNet completed the survey for the role of internal audit in fraud detection. The survey summary and results are here!
AuditNet® Plans e-Monographs on Fraud Topics
AuditNet® is moving forward with e-Monographs on fraud and other related topics that will be added to the subscriber accessible documents over the next 6 months. The planned documents will provide a foundation for a comprehensive fraud risk assessment in conjunction with new internal audit requirements for detecting and preventing fraud. Additionally new monographs are in process for other areas of audit operations including Key Performance Indicators for Internal Audit, Business and Transaction Cycles and Digital Audit Knowledge Resource Guide. If you would like to submit a proposal for a topic please send it to auditnet @ gmail.com AuditNet® Fraud Auditing CornerFraud News Need to keep up with fraud news and happenings? There are several options available. One is to subscribe to the free ACFE FraudInfo E-newsletter. Another free resource is the Auditing & Fraud News. Service for research professionals. Constantly updated news and information about Business & Companies. Go to FraudNet and click on the link Click Here for Fraud News.
Executive
Survey - Strategic Plan for the
In September 2009, Vonya Global surveyed
Executives and Internal Auditors from private, public,
and not-for-profit organizations, spanning many
industries to gather opinions on strategic planning for
fraud prevention, detection, and deterrence.
Historically, there have been several studies conducted
about fraud and fraud statistics, but none that deal
directly with the strategic plans to manage fraud risks.
The timing of this study is appropriate due to the
heightened sensitivity to fraud due to the economic
conditions. It seems more groups, including regulatory
bodies,
Click
here for
the survey summary and conclusions! |
Sarbanes-Oxley News and Views
Breaking News! Sarbanes-Oxley Act Upheld by Justices
Implementing CobiT
IS Control Journal
What are the Benefits of Implementing CobiT?
SOX Television is an Internet Television Network that covers every aspect of the Sarbanes-Oxley Act and the related areas of governance, risk and compliance. Along with its sister network, Risk Television, it reaches more than 300,000 financial, governance, risk and compliance professionals worldwide.
Audit Work Programs Corner
30 Day Trial
Access to the free audit program section now requires registration. The following documents were added this month. They are available on a 1 for 1 exchange for an original audit work program not currently in the inventory. If you unable to share audit programs then consider subscribing to the premium content which provides you with access free and premium content 24/7/365. Interested in a subscription in lieu of cash? (Offer only available for new programs submitted).
Note: Effective September 15, 2010 the basic subscription fee will be $18 a year. The premium subscription will remain at $125 until December 31. Renew or start your subscription now to lock in 2010 rates!
all have access to all the AuditNet audit programs. CCH TeamStores format. Access through the TeamStores support site. ACL Premium and KnowledgeLeader members access through the respective members login.
E-Book
for Subscribers to the Annual Audit Programs
AuditNet is building Analytic Enabled Audit Programs (AEP) which include steps for using data analysis software such as ACL. If you have a program that uses data analytics and would like to share we will add it to this new category.
- Asset Verification (August 2010)
- Bad Debt Reserve-Gaming (August 2010)
- Bank Balance Verification (August 2010)
- Contract Management/Outsourcing IT System Processes-Banking (August 2010)
- Equity Verification (August 2010)
- Fraud Audit Control Testing-Payroll (August 2010)
- Fraud Audit Control Testing-Ghost Employees (August 2010)
- Fraud Audit Control Testing Payroll with Data Mining Steps (August 2010)
- Purchasing (August 2010)
- Spreadsheet Auditing Protocol (August 2010)
Coming Soon
- ARRA Risk Assessment (September 2010
- Asset Management-Retail (September 2010)
- Procurement-Retail (September 2010)
- Sarbanes-Oxley Spreadsheet Testing (September 2010)Store Planning Construction-Retail (September 2010)
- Fraud Analytics Contracts
- Fraud Analytics Healthcare
- Fraud Analytics Purchasing and False Vendors
- Fraud Analytics Purchasing
- Fraud Analytics Financial Statement Fraud
- Gaming Industry Audit Programs (12)
- Oracle Audit Program
- Perimeter Security
- SAP-Collection of audit programs for a company using SAP (23)
- Student Activity Funds General, Receipts and Disbursements (September 2010) (3)
- Time and Attendance
- Travel
Effective September 15, 2010 the Basic Subscription fee will increase to $18 annually. The fee for the basic level covers the administrative cost of maintaining the database. You can still access the programs without a fee if you share an original audit work program with AuditNet®.
Ask the Auditor
Each month I select one question submitted to Ask the Auditor and provide an answer using the same digital tools and techniques that I recommend to all auditors.
Audit Management Software
Q;
The question of evaluating audit software came up again in one of
the LinkedIn groups so I thought I would share an updated
spreadsheet for premium and basic subscribers that should help those
audit departments considering this class of software. (Thanks to
Chris Burt for his guidance on updating the spreadsheet).
A: Many audit
departments are considering their audit software needs and
requirements. The following worksheets provide examples of analyses
that may be useful for your department. There is also a Buyer's
Guide to Audit, Anti-Fraud and Assurance Software by Dean Brooks,
Mort Goldman and Richard Lanza that provides details on different
software solutions. The book breaks down the software categories and
provides good information that audit department can factor into
their decisions. Choose the important factors for your decision
making process and modify them to your environment. The worksheets
may duplicate some of the factors so be aware and only include those
factors you decide fit your internal audit office. We have listed
some of the technology solutions available in 2010. You may need to
update them and include or delete as necessary.
Click here for the free spreadsheet!
For more tips go to Ask the Auditor Forum for How Do I...
Submit a question for Ask the Auditor!
Release the Writer in You!
Looking to Earn Some Extra $$?
AuditNet is interested in developing a series of SOx or industry related audit programs for organizations. If anyone is interested in writing audit programs, ICQs, questionnaires, or control matrices on a work for hire basis please contact me. If you may know of anyone who would be interested in this as well please pass along my contact information.
AuditNet® Fraud Audit Corner
4 Steps to Changing "Compliance Attitudes" in the current economic climate
News for auditors, SAM and ITAM professionals facing cutbacks in costs and resources.
If you are wondering how you are going to manage compliance having
your budget and resources cut in the current economic climate take a
look at the 4 key steps that can change attitudes to compliance!
-
Step 1 - Define an Acceptable Use Policy
-
Step 2 - Deploy the Acceptable Use Policy
-
Step 3 - Audit to the Acceptable Use Policy
-
Step 4 - Enforce the Acceptable Use Policy
Sometimes going back to basics is the best way to force the changes in attitude at the desktop you need to keep you compliant!
Click
here for the files that show you how. (Note: This is a low cost
solution for your compliance program). Mention you heard it through
AuditNet for a 20% discount if you use the following code when
placing an order.
QUOTE: AUDITNet_MJA1991
As a reminder, Pleier Corporation offers 10 % discounts to
AuditNet readers at
www.pleier.com. To take this discount order online
and enter the word AUDITNET in the coupon field at checkout.
Click here for opportunities to share your knowledge and earn royalties
Exceeding Expectations for Internal Auditors