AuditNet® Ask the Auditor Forum

Audit Programs

Disclaimer


 
Web AuditNet

AuditPrograms-l Discussion Forum Archives


Google Ad Text is here so make sure that this is embedded within the hypertext


Index of Audit Programs Archive

 

 

I think could be useful to classify the Audit programs, which now are alphabetically listed, according to two key-words: -Functional Area (i.e. Mkt, Adm, Fin, Contr., R.H., Legal, I.T. etc.) -Argument (i.e. invoice, tax, general acct, payments, recruitment, travel etc.) This classifications, coupled with an order capability of the list, may improve the use of the database. Even other ordering items may be included, such as date, language, file extension etc.)

Great idea! Perhaps you or someone else would like to take on this task and develop a classification system. There is already a page that has the programs organized by broad subject areas (www.auditnet.org/asapind2.htm).

I am looking for an audit program for auditing an ERP implementation.

I performed a Google search using "ERP Implementation Audit Program" for the query and the 2nd item returned was a memo from the CAE at the University of Florida that included an ERP audit program for the above subject. There are other resources, tools and presentations on auditing and risks for ERP systems on the SAP Audit page of AuditNet®.

I am looking for an audit program to audit performance measures.

While many local government internal auditors are involved in auditing performance measures there have not been a significant number of programs contributed to AuditNet® on this subject.  There are some sites that do however provide guidance. Start with the Maricopa County Internal Audit's Performance Measurement Program Information package. It includes an overview of the process as well as an audit checklist. The AICPA has information on performance auditing activities including a generic audit methodology. The Association of Government Accountants provides guidance on the subject in conjunction with their Service Efforts and Accomplishments program and certification program. The Texas State Auditors office has reports on their audits of performance measures.

AuditNet® has a page of performance measurement resources for auditors which should provide you with general information on the subject.

Other useful tools would be best practices for reporting performance measures such as the report from the UK National Audit Office or the guide from the New South Wales Australia Audit Office.

I am auditing a not-for-profit board (specifically looking at Corporate Governance), I am looking for audit programs and or any checklists to look at the effectiveness of Boards.

Start with the A.I.C.P.A. Audit Committee Effectiveness Center for guidance and resources. For a consultant's advice on assessing a Board click here. For not for profit Board governance best practices click here for tools and resources. You might also check the Corporate Governance page on AuditNet for checklists and tools for assessing Board effectiveness. The same principles should apply regardless of whether it is a for profit or NFP.

I wanted to get audit procedures for an audit of the Facilities Maintenance Department of a category one Airport.

The best place to find audit procedures for a specific industry is through a special interest group. Start with the Association of Airport Internal Auditors. Networking with members of the Association should provide you with resources and tools for all facets of auditing airports. In the U.S. some airports are operated by local governments or airport authorities. Find out who operates those airports and then contact management for internal audit contacts. You should consider posting a message on audit-related discussion lists to see if other auditors could help based on work performed in the facilities maintenance cycle. Another method to find audit procedures would be to look for similar industries that would conduct facilities maintenance operations and contact their internal auditors. The way to do this would be using meta information. This is an underutilized search methodology that focuses on using the power of the Internet to find information that may not be directly available via the Web.

Do you have any procedures for airport security and operations audit to ensure compliance with ICAO standards and best practices?

Start by obtaining the official standards. They should be available from the IATA operational safety audit site. Download your free copy of The IOSA Standards Manual.  Also available are The IOSA Programme Manual and The IOSA Checklists.You would then conduct a compliance audit to ensure that the organization complies with the established standards. 

I have been newly assigned a Internal Auditor in ship chartering company. Essentially what I am looking for is an industry specific audit (i.e. vessel chartering) guidance.

Lloyd's Register offers Security management ISPS Ship and Port Practical Pack. I would also suggest that you contact other large commercial charter companies and network with their internal auditors. You should be able to find other similar companies by using Internet meta-information. Also consider audits of the standard cycles that you would find in any business organization such as accounts payable, accounts receivables, purchasing etc. There are audit work programs for these cycles available through the AuditNet inventory.

I have been asked by one of my clients who are a record company to audit the royalties they receive. Does anyone have a program that would cover this in the UK?

 A royalty examination is a detailed examination of a limited set of transactions and activities related to the manufacture, distribution, and sale of goods resulting in payment of a potentially incorrect royalty to the accountant's client. This question has been asked several times and you should be able to find previous Ask the Auditor responses by using your browsers "find on this page" feature (under Edit in MSIE) and enter "royalty". In general, royalties are amounts paid to the creator of tangible and intangible property or ideas. For a fee, the owner permits others the rights of exploitation. The terms and conditions for payment of royalties are based on contracts and law. Royalty audits are therefore contract audits and rely heavily on the formal legal documents. These documents would set out the conditions under which royalties are paid, when they are paid, reporting requirements etc. They are therefore usually tailored to each specific engagement.

There are several licensee royalty audit programs in the AuditNet® inventory.  Also, click here for a brief guide to royalty auditing. You might also take a look at the U.S. Internal Revenue Service Market Segment Specialization guides which include audit programs for the music industry. Another potential resource is an article License Agreements: Are You Getting the Royalties You Bargained For?

Question: We are introducing a new fraud action plan within the Agency and we wish to start the assessment on internal controls on certain areas. One of those areas is the assessment of the background screening that the Agency conduct prior to appointment of employees i.e. reference check, education check, experience check, criminal record .... etc. do you have an audit program or assessment of internal controls related to this subject.

Response: You should begin this review by determining whether your organization has a background checks policy. All organizations should have a pre-employment screening program. At a minimum, screening should include character and background checks, reference and prior employment checks, review of education, salary history, job-title history, criminal conviction record, driving record, and credit history.  If they do, then review the background checks policy. If not then try searching for sample policies on the Internet. For example here are security guidelines for the electricity industry for employment background screening.

While there are no strict mandates for pre-employment screening, the best tests for determining how much is necessary are the after-employment results. For example, auditors should find out whether pre-employment screening would have prevented the selection of people who have done any of the following:

  • Lied on their application about their employment, salary history, education, driving history, or anything else
  • Stolen from the company
  • Been in accidents or received traffic citations while operating company vehicles
  • Proved unqualified for the specific job assigned
  • Become involved in conduct that reflects poorly on the facility

The audit program needs to be developed to fit the background check profile desired by the "Agency". Several aspects need to be considered to insure the integrity of the system:

Adequacy of sources of information and limitations of these sources

  • attributes for verification must be documented, by job type or description if  necessary
  • responsible management must be aware of all limitations of sources of information and make sure the information gathered fits the verification profile desired
  • industry accepted verification practices followed?
  • Audit trail developed during the check process
  • can you prove you followed the verification procedures?

Adequacy of recordkeeping

  • secure
  • for the prescribed and proper period of time

Follow up processes

  • are any follow up / periodic verifications required for sensitive positions or in general, such as drug screenings, etc?

This is a "common sense" type review, however the auditor needs to be
familiar with the concepts and tools used (or available for use) in the verification process. I would make some contacts in the private detective arena (the folks that do this) to learn how they do it. There is a lot of information out there, so you must decide how much of it is relevant to your business and and what may pose a security risk to you. The more information you gather, the higher the cost.

An internal control questionnaire will be included in the AuditNet® inventory in April 2004 on background screening that is a companion to the recruitment of staff ICQ.

Protiviti KnowledgeLeader, a fee based subscription site has a checklist for reviewing background policies. Here are some additional sites that have checklists for background reviews:

SafeHR.com

The ABC's of Background Checking

Introduction to the Human Resources Audit

Checklist for Safe Hiring

Please consider sharing the audit program that you develop with the AuditNet® community.

 

Question: I'm looking for an audit program on a random (drug/alcohol) test program for transportation (railroad) employees.

Response: You might want to start with U.S. Department of Transportation FTA Safety and Security site drug and alcohol testing audit program. The Washington Aviation Administration has a checklist for anti-drug and alcohol program audit. Click here for sample FAA/DOT audit protocols. I hope these help get you started in this specialized audit area. I would also suggest you network with other railroad industry audit professionals to find out how they audit random drug/alcohol test programs. Perhaps AMTRAK's Office of Inspector General could provide some assistance.

Question: I have to set up a audit department (from scrap) for a logistic company. This company provides normal transport activities (freight by truck and train, sea freight and airfreight), but also logistic activities, such as warehousing, projects and supply chain management. Later for example covers just in time deliveries for automobile companies (working with EDI).  As I am just starting, so I am not yet very familiar with the details of this company.

Where do I find audit programs covering the operational area of the business for transport and logistic companies?

Response: This is a complex question given that this is a new area for you. Your first task is to become familiar with the operational details of the company. You should conduct a business risk analysis and inventory of audit units. The audit committee or senior management may provide some direction as to high risk areas for you to concentrate on. The result should be a prioritized audit plan. At that point you will have a better idea of the specific operational areas that you will be auditing. Audit programs on operational areas such as you have mentioned are available in the inventory available on AuditNet®.  The IRS has an audit guide for the trucking industry that may help. For those areas where audit programs are not available online you may have to use online forums and network within your industry. Find contact information for other similar companies and see if they have an internal audit department. Call them and see if you can establish a relationship. Sometimes auditors form informal special interest groups for networking. Visit the IIA Web site and see if there are local chapters available in your region where you can network with other auditors. 

Question: Would you be able to provide any guidance on where I can find an audit work program for succession planning? Also, any better practice or benchmarking guidance documents on succession planning would be great. I work in an electrical transmission company but I assume succession planning is pretty similar across most industries.

Response: Succession planning is a process designed to ensure the continued effective performance of an organization by making provision for the development and replacement of key people over time. Succession planning is generally considered to be a strategy of work force planning.  There is an article that will appear in the January AuditNet® newsletter on Succession Planning for Auditors. There are few audit programs available on the subject however there is an Audit Report on Succession Planning completed by the Canadian Public Service Staff Relations Board. Also the following resources may help:

Classification Workforce Planning Guide

Guide to Auditing the Management of Workforce Adjustment

Guide to Workforce Planning in Local Authorities

When you develop your program please consider sharing it with us!

Question: I am planning an audit of the pharmacy department having 7-10 pharmacy satellite, storing, dispensing, compounding medicines to cater the need of the hospital. If anybody can share audit program?

Response: Begin by looking at the resources in the next question such as the AHIA. The Purchasing and Distribution Interest Group where they have posted Guidelines for the Audit of Hospital Pharmacy Procurement, Storage & Distribution. The Royal Pharmaceutical Society of Great Britain produces model standards for self audit in community pharmacy in England. You might want to seek out local health departments for any legal requirements that should be incorporated into your audit program. Look at audits performed by state and local government agencies to get ideas and contact the jurisdiction for audit program they used. Internet meta-information is a powerful resource. You should also post a message on the auditprograms-l discussion group to get input from other auditors.

Question: Where can I find a Pharmaceutical Billing and Collections Audit Program? The audit will be operational, financial, and compliance in nature.

Response: There are several pharmacy related audit programs in the AuditNet inventory. Check with the American Society of Consultant Pharmacists for resources. The Association of Healthcare Internal Auditors has an audit program library accessible to members only. You might also look at audits performed by other organizations in this area and contact them for assistance/guidance. Here are a few examples:

Combined Assessment Program Review of the VA Long Beach Healthcare System

Maricopa Integrated Health Systems

I would also suggest that you network with other internal auditors in your industry area to share information and resources. AuditNet® would be willing to act as a clearinghouse and set up a special interest group to facilitate this network.

Question: Any suggestions on where I can locate a call center audit program?

Response: There is a call center audit program in the AuditNet inventory in Section B Information Systems Technology Audit Programs.

Question: Where can I find audit programs on auditing a gas & power company at the wholesale and retail levels?

Response: There are several audit programs for gas and oil refineries in the AuditNet inventory. There is also an IRS audit program for the oil and gas industry that may be helpful. There are some power company audit programs in the supplemental audit programs section of this site. Look at the management and operational audit programs. You could also conduct a search on Google on this topic to locate consultants or training for this area. I would also suggest that you network with other power company internal auditors to share resources. This may take some creativity but using Internet meta information is a powerful search tool. First locate the Web sites for power companies such as Potomac Electric and Power, Washington Gas Light, Florida Power and Light or others in your state. Call them up and ask for their internal audit department. Establish a dialogue with power company internal auditors and establish an informal (or formal) network to share information and resources. AuditNet® would be willing to act as a clearinghouse and set up a special interest group to facilitate this network.

Question: Where can I find audit programs related to mortgage loan production and loan servicing programs?

Response: Start by looking at the audit programs on the AuditNet® banking page. There are a group of programs for loans. The Mortgage Banking Comptroller's Handbook from the OCC includes an audit program for mortgage loan production. You might also consider purchasing one of the following publications: Mortgage Compliance Audit Program or the Regulatory Compliance Audit Program from Alex Information. Try using the following query: audit program for loan servicing and locate some organizations that have audited in this area. Contact them via their e-mail address and ask a copy of their audit work program. Examples might include Audit of Loan Processing and Disposition Procedures, Southwest Bank, Jennings, Louisiana.

Question: I am looking for an audit program for sundry creditors will you be able to assist?

Response: There are a number of audit programs on the Internet for credit and collections and accounts receivable. Begin by looking in the AuditNet® audit programs inventory. Look for programs for accounts receivable, collections, and credit and collections. You will find additional programs for accounts receivable here. Michigan State government also has an accounts receivable audit program available. If these do not meet your needs then I suggest you post a request on the auditprograms-l discussion list.

Question: I am looking for an audit program to audit the security for Novell Netware 4.X.

Response: For a Novell Netware audit program which includes security click here.  

Question: Currently doing an audit on our organization's Workers' Compensation program. We are self insured. Anyone have an audit program that I can look at?

Response: Workers' compensation insurance is one of the costs of doing business in the United States. Employers can and should dramatically reduce their workers' compensation expenditures, and thus their overall costs, by examining workers' compensation as they would any other cost of doing business. They should undertake this effort independently of external factors, such as governmental initiatives that are either in effect or proposed. Click here for a link to a sample chapter from a Workers' Compensation Guide that may help. Click here for another book on Workers' Compensation.

It helps to know what where your company operates as Workers' Compensation is typically a state issue. For example:

A Guide for Vermont Business Owners: Workers compensation Insurance

North Dakota Workers' Compensation Guide

Oregon Workers' Compensation Division

Many government organizations have audited workers' compensation. You should conduct a search using Google and then contact the jurisdiction and ask for a copy of their audit program or steps that they used in their examinations. Here are a few to get you started:

City of Austin Employee Safety Audit

U.S. Department of Veteran's Affairs Workers' Compensation Program Resources Page

The Internal Auditor for the City of San Jose has a risk matrix for Workers' Compensation. 

When you have developed an audit work program for Workers' Compensation consider sharing it with others by sending a copy to editor@auditnet.org

Question: Has anybody got a security/audit checklist for tomcat? (We require a comprehensive checklist for websphere, apache tomcat, apache)

Response: The best resource available for Tomcat may be the Apache Jakarta Project where you will find a Tomcat mailing list. You might also check the Tomcat User List Archive. The Apache Tomcat Security Book may be helpful.

If you or any other reader develops a Tomcat security/audit checklist send it along to editor@auditinet.org to share with others.

Question: Where can I find the Bank ACH Self-Audit Program that Banks are required to perform by December of each year?

Response: The Financial Manager's Society publishes the Financial Institutions Internal Audit Desk Reference with the FMS Audit Program Collection that contains an ACH audit program. The New England ACH Association produces a publication called ACH Self Audit Guide. You might also want to check the NCUA Examiners Guide for information about ACH self audits. Finally check the audit programs available from this site as there are banking related programs including an ACH work program and an ACH ICQ.

Question: Can you please provide me a detailed audit procedure on the review of pier/port operations?

Response: This is a specialized area that may not be generally available via traditional Internet sources. The UK Department of Transport provides a guide to the good practice of port marine operations that you should review. The American Association of Port Authorities produces an environmental management handbook which may provide some help. Look at other Port Authorities for types of audits they conducted and then find contact information on their Web sites. Then ask their auditors for tips or audit programs on port operations. For example the Virginia Auditor of Public Accounts audited the Virginia Port Authority. You should be able to find internal audit contacts at other port authorities by using the query "port authority" +audit in a Google query.

Question: Where could I obtain an audit program for value added taxes (VAT)?

Response: The Irish Revenue Department publishes a Revenue Audit Guide for Small Businesses that may be useful. The IIA UK and Ireland offer a course on Auditing VAT. Click here for specific steps in auditing VAT.

Question: I would like to request information or an actual audit program covering Banking Regulatory Reporting Applicable. Specifically, FED report 2900 and Quarterly Call Report.

Response: Start by reviewing this earlier question. You should also check the AuditNet bank and financial institutions page, The FDIC site is a must for regulatory reporting and audit guidance as they regularly issue financial institution letters. You should also tap into Internet meta-information by contacting other bank auditors and ask them to share their audit work programs in the area of regulation and call reporting.

Question: I am trying to locate an audit program or some sort of audit guideline pertaining to the audit of Political Action Committees PACs). Specifically, the audit program should address compliance with the regulatory requirements and reporting requirements of PACs. I have done some searches, but have not specifically found such an audit program. Can you help?

Response: I am not aware of specialized audit programs or guidelines covering PACs but that does not mean that they do not exist. There is a campaign finance audit manual available from the city of San Francisco that may provide some general guidance. Political action committees have specific compliance and reporting requirements as stipulated by the Federal Election Commission (FEC) and the Internal Revenue Service. As you identified this as a compliance audit perhaps you should start with the regulatory requirements and then test for them. It should be relatively straightforward to develop an audit program testing for the regulatory compliance requirements. You should be looking at disclosure requirements pertaining to contributions, expenditures, accrued expenditures, and loans, including itemization when required; restrictions on contributions, loans and expenditures; accuracy of total reported receipts, disbursements and cash balances as compared to bank records; and compliance with all record-keeping requirements.

Here are some additional Web sites where you may be able to get more information:

Check with the State Board of Elections for your state to review specific state laws:

Question: Could you please provide me with audit programs / links concerning the audit of Television Stations? Specifically I am looking to draft an audit program on the Substitutions/Trafficking Process, however any audit programs/links pertaining to the audit of TV Stations would be appreciated.

Response: Finding industry specific audit programs can be difficult. Because different industries have unique features it is necessary to network and find other auditors within that industry. I would suggest you post a message on one of the general audit discussion lists such as Audit-l. Ask if there are any auditors in the broadcasting industry that would like to exchange ideas/information. Another method of finding auditors in this industry would be to go to peer organization Web sites and send them an email requesting contact information for their internal audit department. Try contacting the National Association of Broadcasters for peer companies. While auditing TV stations may have some unique areas there may be some common areas where you could find existing audit programs. For example, accounts payable and receivable, human resource and payroll, purchasing etc. You can find audit programs for these areas in AuditNet or you could try Protiviti KnowledgeLeader, a fee based subscription service. Finally if you have unique audit programs for the broadcasting industry consider sharing them with AuditNet®.

Question: Is there an Audit Program for Cash account under SAP System?

Response: Go to the AuditNet® Virtual Library page and click on SAP Audit. The AuditNet® SAP page has various documents that should prove helpful especially the SAP Auditing Manual. There is also a discussion list for auditors using SAP and other ERP systems. 

Question:  I am looking for an example of a risk management program/plan for investments (i.e. property trusts, local and overseas equities, fixed interest securities, money market and cash deposits) detailing the objectives, risks and controls.

Response:  There is a wealth of information on audit risk management for investments available on the Internet. Check out the PricewaterhouseCoopers working guide for an investment company's audit committee which may provide some direction. Also the N.Y. Office of the State Comptroller published investment guidelines for public authorities. The Capital Market Risk Advisors group publishes Risk Standards for Institutional Investment Managers (site registration required).  For an audit program try the Texas State Auditor which has one for compliance with the Public Funds Investment Act that include steps for evaluating investment policies and procedures. For training in this area consider the Institute of Internal Auditors seminar entitled auditing investment activities.  You might also consider contacting the internal auditors at Charles Schwab as they implemented COBIT and IT governance for their operations. Two publications you should consider adding to your library include Auditing Investments from the IIA and The Financial Managers Society Internal Audit Desk Reference which includes objectives, risk and controls for financial institutions. 

When you have developed your audit program/guide for this area consider sharing it with AuditNet! 

Question: Do you have an audit program for disposition of overstock inventory?

Response: Start with our Audit Programs page which includes the following audit work programs for inventory:

Next stop should be Protiviti KnowledgeLeader, a fee based subscription site that includes an audit work program space. There are 4 inventory audit programs at their site. AuditNet® users can sign up for a free 30 day evaluation. 

I would also suggest reviewing the GAO report on Inventory System Checklist which includes a section on inventory disposition. For best practices on inventory management check out GAO's Best Practices in Achieving Consistent Accurate Physical Counts of Inventory and Related Property. If you develop a specific audit program for disposition of overstock inventory consider sharing it!

Question: Can you provide examples of good audit programs for hospital inventories, particularly in the financial evaluation and testing of inventory values?

Response: The best place to start a search for hospital or healthcare related audit programs is the Association of Healthcare Internal Auditors. They maintain an audit program library accessible by members only. The State of Iowa has a hospital audit program guide that includes a section with audit steps for inventory. Another approach is the use of Internet meta-information. For example look for organizations that have issued audit reports on hospital inventory management and contact them and request a copy of their audit program. ie. DoD OIG audit report. For best practices on hospital inventory management perhaps a search of vendors such as Hospital Inventory Specialists would be worthwhile.

Question: I am currently busy with the planning phase of an internal audit on warranty claims relating to trucks and buses. I will appreciate any related Audit Programs that will assist me in developing an appropriate Audit Program regarding the afore mentioned audit.

Response: The AuditNet® audit program inventory includes some audit programs for fleet maintenance. You might want to check some local government audit departments. There are audit programs for fleet maintenance that include warranty claims. Start with the City of Tampa Internal Audit Department. The IRS Market Segment Specialization Program has an audit guide for auto dealerships and trucking companies. Contact the City of Austin Texas Auditor who also reviewed fleet maintenance and repair. Also consider Protiviti KnowledgeLeader, a fee based subscription site, as they have a warranty/field services audit program. AuditNet users (and others) may sign up for a free 30-day evaluation for this content rich site.

Another potential resource is from Ufleets.com, a Website focusing on utility company fleet maintenance. They have the following articles in their publication:

Question: Is there an Audit Program for Disposal of Waste Materials?

Response: Proper disposal of waste material would come under the area of environmental auditing. An audit program for this area would be dependent on the type of waste materials that you are disposing. Laws and regulations may govern what your organization can and must do when disposing of waste materials. This would come under the category of compliance auditing. For example, the Minnesota Pollution Control Agency has a environmental audit checklist for solid waste. They also have an automotive service providers audit checklist for aerosol containers.  Their publication site has various publications including risk based site guidance documents. 

Question: I understand that the IIA has a lot of audit program for its members. I am a member of IIA but am unable to locate the section in the IIA website. Can anyone direct me to the right site?

Response: The Institute of Internal Auditors has a library of publications available for sale that include audit work programs. For example the IIA is developing an auditors toolbox which will include audit programs and other materials available for purchase by members. There are also audit handbooks and other publications that include audit programs. Of course the primary resource for free audit work programs continues to be AuditNet® with an inventory of over 500 audit work programs. The AuditNet® Audit Work Programs page also provides links to other pages and sites containing audit programs. KnowledgeLeader, a fee based subscription service, also has an excellent inventory of audit work programs. Members of the Association of Healthcare Internal Auditors and the Association of College and University Auditors also have respective member access to their audit program libraries.    

Question: Our team is currently performing an audit of Postal Inspection Service's (The law enforcement arm of the Postal Service) budget process. I've been researching possible audit steps that may be used in our audit program and have only found your sites "Questionnaire" relating to budgetary controls. Do you have in your files any specific audit steps that could help me prepare a more comprehensive audit program related to the budget process for government?

Response: The best way to develop this review is by looking at the control objectives for the budget cycle for authorization; economy, efficiency and effectiveness; transaction processing; classification; substantiation and evaluation; and physical safeguards.   

Authorization - ensure that the agency's budget was developed in accordance with the agency mission, authorized in accordance with laws, regulations and management's policy, and developed in accordance with Congressional, OMB. legal and management policies and procedures.

Economy Efficiency and Effectiveness - planned program results should be in accordance with laws, regulations, and managements policies and plans, programs should be planned in an efficient and economical manner, budgeting processing procedures should be economical and efficient.

Transaction processing - budgetary information should be properly classified in accordance with budget guidelines, actual information for previous periods included within the budget should be taken or reconciled to reliable financial reporting systems, budget information developed from the lowest levels of the organization should be accurately and promptly classified, summarized and reported, changes made to budget submissions should be properly controlled and reconciled to final budgets and approved budgets should be properly entered into appropriate agency systems.

Classification - Apportionments made should be properly accounted for and reconciled with overall appropriations, budget reports should be prepared accurately, promptly and on a consistent basis that adequately presents the information they are supposed to display.

Substantiation and Evaluation - detail budget data should be properly controlled and accounted for and reconciled with final appropriations.

Physical safeguards - access to critical budget forms and records, processing areas and processing procedures should be permitted only in accordance with laws, regulations and management's policy. 

Following are some additional resources on auditing the budget process:

Governmental Audit Program for North Carolina Local Government
Budget and Fiscal Control Act

City of Tampa Internal Audit Program for the Budget Office

The City of Berkeley California performed an audit of the departmental budgeting process. 

Contact the City Auditor auditor@ci.berkeley.ca.us for their audit work program if needed.

Best Practices in Public Budgeting

Question: Are there any standards or guidelines for royalty audits in the area of patents or other related fields? Are there any source materials that practitioners in this area regularly use

Response: Royalties are payments made for the use or rights owned by another person, company, partnership or trust. They may be periodic, irregular or one-off payments. Royalty payments are generally part of contractual agreements so auditing them is not complex. In the area of Minerals Management there is an audit manual for the Royalty Management Program. AuditNet® has a royalty audit work program in the Audit Programs section.

The IRS Market Segment Specialization Program provides audit guides for specific industries including those that involve royalty payments. 

The following is an audit clause from a publishing contract:

Audits

The writer should ensure that he has appropriate rights of audit. An audit of a publishing company tends to be far less complicated than a record company audit but nevertheless it is prudent periodically to carry out an audit. If a writer's royalty account is unrecouped so that the audit is unlikely to give rise to any additional payment then it may be sensible to delay carrying out the audit. The writer should be careful not to fall foul of restrictions in the agreement to the effect that accounting statements are to be deemed accepted and no longer subject to any objection after a given period (usually two or three years). Generally, it is a simple matter to persuade the publisher to extend any objection period to allow any audit to be deferred.

Question: I am looking for a audit program concerning a bank Call Report. 

Response: The DOS Manual of Examination Policies is a possible resource for audit guidance on bank Call Reports. The Financial Manager's Society provides workshops on call report basics. The State of Florida provides a  minimum audit procedures report for their comprehensive annual audit. The Comptroller of the Currency has several publications with guidance on call reports. 

The following are standard steps from bank audit guidelines:

Determine if the allowance for loan and lease losses is reviewed by
management or the board of directors, or both, at least quarterly to
coincide with the call reporting requirements and accurately reflects
the risk in the loan portfolio.

Does management’s assessment state that the internal control
structure and procedures for financial reporting (including
preparation of the Call Report) are effective as of the end of the
fiscal year? Yes___ No___

Question: My organization is a Gambling regulator. It collects gambling taxes from casinos, horseracing for the government. It is also responsible for issuing gambling licenses, curbing illegal gambling and regulating the gambling industry. There are inspectors and investigators that are tasked with ensuring compliance with Gambling Acts, Rules and regulation -including verifying accuracy and completeness of gambling tax returns. As an Internal Auditor I have been asked to perform an audit to review their performance as well as adequacy and effectiveness of the the procedures they use in performing their duties. Would you help me find a relevant audit program or guidance?

Response: There are several resources available on AuditNet and the Internet for gaming industry auditors. In the audit programs section of AuditNet there is a bingo audit program and a casino audit program which may help. The Institute of Internal Auditors has a gaming audit group. The IIA has a publication called Auditing the Casino Floor: A Handbook for Auditing the Casino Cage, Table Games, and Slot Operations. Also the following Web sites are including in the AuditNet Resource List.

Internal Audit Compliance Checklists from the Nevada Gaming Commission and State Gaming Control Board provides a walk through and testing procedures for each type of game. 

Internal Control Minimum Procedures from the state of Colorado, provides forms and control procedures for gaming operations. 

Other possible resources include the National Gaming Board of South Africa which has an audit process model, practice guidelines, an audit file index, and regulations for limited payouts and the Virginia Charitable Gaming Commission.

Question: I am an internal auditor and in search of a standard audit
program regarding auditing bank's treasury front and back offices . Bank has a head office treasury as well as overseas treasuries.

Response: There are a number of bank audit programs available in the AuditNet Audit Programs section. Also AuditNet established a section for banking and financial institutions which includes additional reference material for auditing banks.

Question: I am in the process of conducting an audit of my fraternity's financial records. I plan to use the non-profit organization checklist to develop my program. However, please let me know if there is another resource or program available that may help me with this engagement.

Response: This was a tough question as at first glance there appears to be limited resources available specifically for auditing fraternity's. However, the power of the Internet came through. There is general information available on auditing non-profits and a few of the links include:

Finances for Nonprofits

Nonprofit Audit Preparation Checklist

There is also an AuditNet page with  resources for not for profit organizations. 

Phi Sigma Kappa has a finance guide available which includes a basic checklist as well as audit steps to review chapter financial operations. Other national chapters of fraternities and sororities may provide similar guidance.

Question: Is an audit program for customer billing/ invoicing available?

Response: Customer billing and invoicing are part of the revenue cycle so you should expand your search to that area. The AuditNet inventory of audit programs has an audit program for receivables as well as a Revenue Recognition audit guide that may provide some direction. There are also some receivables/billing audit programs available here. The Defense Contract Audit Agency has an audit program for billing system controls. Andersen's KnowledgeSpace, a fee based subscription service, has a billing and collections review audit program in their library of audit work programs. They were offering 30 day trial subscriptions but may have suspended that program in light of recent events.  Depending on the organization that you work for, there may be other industry specific resources available. For example unique industry related issues may exist for billing in government, utilities, college and universities. 

Question: Do you have any audit programs or suggestions for developing an audit plan for misuse of cell phones? I was planning on obtaining a data dump of all the bills with detailed info and loading it into A.C.L. but what should I be looking for?

Response: A number of local governments audited cellular phone usage. Following are some highlights of audit findings from other organizations: 

  • Employees being enrolled in inappropriate plans
  • Questionable bills that went unchallenged
  • Inadequate monitoring of which phones were being used. (Audit found that users of cell phones couldn't be identified
  • Discrepancies in inventory of cell phones
  • Personal calls that were not reimbursed at full cost (cost plus tax plus overhead)
  • Underutilization of service
  • Cellular telephones assigned to staff that perform tasks or dedicate 50% or more of their time in the office
  • Billing errors not discovered and corrected
  • Excessive personal calls made during business hours

Following are links to some of the audit reports (request a copy of the audit program from the auditors):

King County Auditor's Office
West Palm Beach Auditor's Office
Missouri State Auditor

We also added a request for a cellular phone audit program to the ASAP Clearinghouse to encourage auditors to contribute work programs for this area. 

Question: Could you please provide me with audit programs / links concerning the audit of printing and journal publishing units? If feasible the focus should be the audit of ads (income position) and the distribution (subscription).

Response: Auditing printing or journal publishing units is a very unique area because of the nature of the industry. The question was asked before so click here for the response. There was also a question asked about the advertising audit programs that may be helpful. While there are no audit programs for printing and publishing units in the AuditNet inventory that does not mean they do not exist. This is another area where Internet meta-sources should help locate audit programs. Find an association or trade group for printing and publishing concerns and look for a list of companies similar to yours. Find an email contact and ask if the company has an internal audit department and whether they can provide the name and email address for the Director. Send an email and ask for help. You should also contact the Institute of Internal Auditors and ask them for audit contacts within the printing and publishing industry. When you find or create an audit program for this area consider sharing it with AuditNet.

Question: I work for a state authority and have been asked to audit the current contract of a cleaning service for potential violations of compliance with prevailing wage rates. I have no experience with either janitorial services or prevailing wage, and have not found a great deal of information from my usual sources. Any advice or audit helps (audit programs, questionnaires, articles, etc.) would be appreciated.

Response: The place to start this audit would be from a contract perspective. This would be a compliance audit to ensure that the cleaning service is following the contract and following wage rate guidelines. The contract should detail what is meant by prevailing wage rates. For assistance on contract auditing your should visit the Defense Contract Audit Agency site. They are the U.S. Federal governments contract auditors and they have a great deal of experience in this area. They may be able to provide guidance on auditing prevailing wage rates. 

Question: I am looking for an audit program to review application security on the MONTRAN and ST400 applications. While I have found generic application security ICQ's, I would like something that addresses the specific security features of these money transfer applications.

Response: There are two suggestions for application specific audit programs. First you should try to locate other companies that have the specific application installed and then contact the internal audit department for that company for assistance. This meta-searching recognizes that while the Internet may not provide a specific answer to a question, it provides links to people or organizations that may have the answer. Secondly I would post a message to the CISACA-L list for assistance. Subscription information is available here.

Question:  By chance do you have an audit program for reviewing Managing General Agents?

Response: AuditNet does not have any specific audit programs for this area however we have added this request to the Clearinghouse of Audit Program Requests. 

Question: I need an audit program and internal control questionnaire for auditing contract management.

Response: The AuditNet inventory of audit programs includes a contract attribute test that may be helpful. There is a contract audit program available for purchase here. D.C.A.A. has many contract audit tools available which could be adapted to different organizations. NASA has a contract management division that may be able to provide some guidance for auditing that area. 

Question: I would like to receive an audit program on Treasury for an operational audit with a preliminary objective of ensuring the safeguard of assets.

Response: Safeguarding assets comes under the scope of work standards for internal auditors. While not specific to auditing a treasury operation there is a quality assurance review work program that covers the issue of safeguarding assets available here. AuditNet has the following treasury related audit programs and questionnaires:

There may also be some useful information on the banking page of AuditNet.

Question: I'm trying to put together an Audit Program for Data warehouse Operations audit. I have looked into Physical/Logical security programs, Data retention program but no one covers the data warehouse. Please help me out.

Response: There are some resources that will help in auditing data warehouses. The Institute of Internal Auditors February 1998 journal (Internal Auditor) contained an article entitled Data Warehouse Control and Security. A similar article by the same author was published in the journal of the Association of College and University Auditors in April 1997 and is available online. The AuditNet inventory includes a data warehouse control worksheet. The Hong Kong ISACA chapter has a presentation on auditing the development of a data warehouse available here. Finally the The Data Warehousing Information Center contains Articles on Data Warehousing.

Question: Do you have any audit program for Car Rental / used Cars buying and selling business?

Response: I assume that you are looking for the used car sales side of car rental agencies. While I have not seen a specific program for this industry, there are various resources that you should investigate that could assist in developing an audit work program.  The AICPA has an annual National Auto Dealership Conference which include updates for car dealerships, internal controls and other sessions of interest for accountants and auditors in this industry. Contact them and see if they have information provided at the conference. They also publish an Auto Dealership Engagement Manual that may help.  You might also review the I.R.S. Auto Dealership Guide or their guide for Independent Used Car Dealers. There is a CPA Firm Specializing in Auto Dealerships. You might try contacting them for some guidance. They have the following information on their web site:

Guide to Record Retention for Auto Dealerships 

Automotive Industry Guidelines - Productivity and Operational Guidelines

and www.dixonodom.com/auto_balance_sheet.htm

Newsletter Archives for issues relating to automobile dealerships.

AutoCPA - nation wide association of Certified Public Accounting firms, each of whom specializes in providing professional services to automobile dealerships. Monthly newsletter has accounting and audit tips for dealerships.

Computer audit tools that help you understand your dealership's financial results!

Two final suggestions. Contact the car rental companies that sell used cars and find out if they have an internal auditor. If they do then either phone them or send them an email and ask for some guidance on auditing operations. Post a message on auditprograms-l asking for help. It is possible that auditors from car rental companies subscribe to the list. 

Question: I need an audit program or audit questionnaire for the following areas of a Retail Bank:

1. Personal Banking
2. Marketing department

Response: Bank Branch audit program

Click here and here.

Question: Does anyone have a good audit program for Funds Transfer Pricing at a commercial bank? Any help would be greatly appreciated.

Response: I would begin by looking at the audit programs available in AuditNet's inventory.  Also KnowledgeSpace, a fee based subscription service, may have audit programs and other material for this subject. Sign up for a free 30 trial subscription to access the material. E&Y has a transfer pricing global reference guide which could help. The Association for Management Information in Financial Services provides forums including one for funds transfer pricing. The Organisation for Economic  Co-operation and Development has transfer pricing guides that may be useful in developing an audit program for this subject. Check here for an article on understanding funds transfer pricing. There are two additional techniques to find information on this subject. One would be to post a message on either the audit-l or auditprograms-l email discussion lists requesting assistance. The other technique is networking with other bankers using meta-information and request copies of audit programs for this area directly from those contacts. 

Question: I'm interested in finding out from any Energy Companies (Trading, Refining, Pipelines etc.) who use the COSO model, if they have a standard program for "Assessing Risk Assessment" and/or a good Risk Assessment model/tool that they recommend to their auditees?

Response: Finding information about who is using what technique is not something that you would typically find on the 'Net. However the Internet is probably the best place to begin your search for the answers. The way to find out what other energy companies are doing including who is using the COSO model would be to contact them directly using meta information. As an energy company internal auditor you probably are aware of peers and competitors so you should develop a list, find their Web sites and contact them via email and ask for an audit contact. You could also contact the Institute of Internal Auditors and see if they have a list of energy companies with internal audit functions. Finally you should consider posting a request on one of the audit related discussion groups such as Audit-l. Even if you don't receive responses from energy auditors, you may be able to find some model/tool that you could customize.  

The following may also help:

www.ucop.edu/ctlacct/csa/prof-pract/csa-1.pdf

COSO Control Evaluation form

Question: Do you have any programs relating to auditing the Head Office of a retail environment. i.e various merchandising departments.

Response: The VF Corporation has a retail audit program on their site. Also the IRS Market Specialization Program has an audit program for gift shops. There is also a retail store operations audit program in the AuditNet inventory. There is a book titled Retail Auditing: A Practitioners Guide by John Wiley that you should consider for your library. Finally you could use what I call meta searching to locate other retail operations by searching the Internet, finding specific companies and then contacting their audit departments directly. 

Question: My next audit assignment is project management for a technology based company. One of the scope is on monitoring of projects and product quality. Appreciate it if you could provide me useful sites or audit programs.

Response: The following sites provide some "direct" project management audit information and a lot of good information that can be used to tailor the audit program to meet your needs. Hope this is what you are looking for.

Structured Project Management Audit 
Project Completion Audit 
Audit a Project Plan
Project Management Institute
The Project Managers Homepage
WWW ­ Guide to Project Management research Sites
Commonwealth of Virginia IT Project Management Guidelines -
or this one.
California’s IT Project Management data 
The Project Management WWW Site 

Question: I have to write work program about R&D cycle. Do you have any audit programs to provide for me ? Many thanks in advance.

Response: The U.S. Defense Contract Audit Agency has an audit program for Cost Accounting Standard No. 420, Accounting for Independent Research and development cost and bid and proposal costs. Select audit programs and then go to the link for DCAA audit programs. Another source worth checking should be the National Institute of Standards and Technology Advanced Technology Program website at www.atp.nist.gov/atp/sitemap.htm which has audit guidelines for technology projects. The Internal Revenue Service Market Segment Specialization Program has a guide for Computers, Electronics and the High Tech Industry which has a section on auditing r&d.  

Question: Do you have any audit programs for Windows 95 and Windows 98 workstations and servers?

Response: AuditNet has some audit guides for the Windows environment that may help.  As auditors adapt to the newer versions they develop and share audit programs, so you should check the site periodically. Also Microsoft® Windows NT® 4.0 Security, Audit, and Control by PricewaterhouseCoopers is another resource for auditing Windows operating systems. 

Question: I am going to do an Internal Audit work for a Hotel. I have managed to get the audit programs from your Forum, I wonder if the Internal Audit Programs for Hotel Operations will be the same. I also need a comprehensive Internal Control Questionnaires for Hotel Operations. Please assist. Thank you.

Response: There are several hotel audit programs available in the Audit Programs section of AuditNet.  If you look at the top of the programs, the contributors email address is available. Contact them via email and ask for their assistance for an ICQ for hotel operations. This is know as meta-information and therein lies the true value of the Internet: links to information about information. 

Question: Would like an audit program that covers the (OFAC) Office of Foreign Asset Control requirements.

Response: There are several resources for auditing the U.S. Department of the Treasury OFAC requirements. Perhaps the best place to start would be the web site of the Office at 208.45.140.254/ofac/ and download the industry summary for banks which provides the Foreign Assets Control Regulations for the Financial Community. Another site that may help is Bridger Systems' www.ofaccompliance.com/ OFAC policy and procedure guide at www.ofaccompliance.com/OFACPolicyAndProcedureGuide.pdf. One more useful resource to develop an audit program would be the Big Orange Book from Kirchman Regulatory Service which is available at www.kirchman.com/comply/compliance_bob_contents.html. The above resources should provide the compliance guidelines that would be the basis of an audit program. 

Another option would be to tap into Internet meta information by locating other audit offices that would have to audit the same requirements. Network with other bank auditors and ask for their assistance via e-mail. Post a message in AuditNet's audit-l e-mail discussion forum. There is a high likelihood that someone has developed an audit program for this area and would be willing to share what they have prepared.  

Question: I am an internal auditor for an association that has a publishing division. Do you have audit programs for the recording of advertising, subscription, royalties and electronic license revenues? Also, do you have audit programs for sales commissions? (All are associated with the publishing division).

Response: There are several audit programs in the AuditNet inventory that should help such as the licensee royalty audit program and the sales office audit guide which includes procedures for auditing commissions. KnowledgeSpace, a fee based subscription service, has audit programs for commissions review. Sign up for a free 30 day trial and download the audit programs you need. 

While these audit areas may seem unique to your industry you may find that expanding your search to other industries would be helpful. Concentrate on the fact that you are an internal auditor for an association and seek out other association internal auditors. For example, check out the Financial Management Association links to associations. Most associations have publishing divisions or operations and the internal auditors for those associations may have covered some of the areas you mention. Additional steps that may help include:

Contact the CPA firm auditing your association for guidance on reviewing the areas mentioned

Post a message on an audit related discussion list such as audit-l or auditprograms-l and use peer to peer networking for assistance. 

Question: I'm trying to put together an audit program for a Cash Forecasting and Reporting audit. Do you have any sample programs or know where I can find some helpful info?

Response: All forecasting models, including cash forecasting are built on assumptions. The way to audit this would be to test the assumptions and determine their validity. To the best of my knowledge there are no standard audit programs that address this environment as each forecast would be unique. There are some automated programs that test the process. One of these is called Fourcast Audit. I will also add a request in the Audit Programs Clearinghouse to see if any other auditors have an audit program on this subject.

Question: I would like to find an internal audit program for the Proof
and Transit area or department in a banking institution.

Response: The following document from the FDIC Bank Examination Manual has a section on steps in reviewing the proof and transit area of a bank.

Question: I am looking for an audit program relating to P C Inventory in a municipality.

Response: Conducting an audit of personal computers can involve either the hardware or the software. There is an audit program on this site for auditing installed software on personal computers. There are also a number of off the shelf software programs for a computer hardware inventory. Personal computers are accountable assets and therefore an audit for this area should be the same as a audit of fixed assets. There are several fixed asset audit programs available as follows:

Fixed Assets Audit Program

Fixed Assets Controls Audit Program

Members of the National Association of Local Government Auditors (NALGA) can search the abstracts of audit reports submitted by other jurisdictions. Find a jurisdiction that conducted a fixed asset inventory audit of personal computers and contact the auditors to request the audit program. Membership information for NALGA is available at www.nalga.org 

Question: Where can I find a Windows 2000 audit program?

Response: Windows 2000 is a relatively new operating system and it usually takes time for the audit community to adjust. Click here for a security related article entitled Auditing Windows 2000. There is also a Windows 2000 Installation Security Checklist available at LabMice.net. I would suggest also posting a message on the auditprograms-l and cisaca-l discussion lists for assistance. 

Question: I would like sample audit programs for the unit trust environment (USA mutual funds?), specifically on new business, redemptions, switches transfers, etc.

Response: Best bet would be to first contact the National Association of Financial Services Auditors. See if they can put you in touch with a financial services auditor in the mutual fund industry. You might also check the following Web site: Resources for Bank Internal Auditors. The last option would be direct contact with some large mutual fund companies such as Vanguard or T. Rowe Price and obtain a contact in their audit department and ask them directly. This is known as meta information and is perhaps the most powerful use of the Internet as an audit tool!

Question: Does anybody knows where I can find audit programs written in Portuguese or Spanish?

Response: AuditNet has a limited number of audit programs in Spanish. Go to the Audit Program page. 

Question: Do you have an audit program for a Credit Union?

Response: Check on this page for credit union resource links (1 & 2).

Question: Can you provide me with an audit program regarding Pensions (benefits and accounting)?

Response:  Auditing pensions is a complex area but here goes. There appears to be information available however there is not much that is free. The AICPA issued the Audit Guide for Employee Benefit Plans which you should probably have for reference.  Check with the AICPA on ordering information. cpaSpan includes an outline of a speech by John Cheek covering financial statement audits which draws heavily on the AICPA guide referenced above. The IRS has a handbook called Employee Plan Examination Guidelines available here and the Employee Benefits Library has a section called audit guidelines which is available here.  The New York State Society of CPA's had an article called Planning an audit of an employee benefit plan which may help although it is old. 

CPE Online offers a course called Auditing Employee Benefit Plans: Level I

Books that may help include:

RIA - Accountant's Guide to Employee Benefit Plans

PPC - Guide to Audits of Employee Benefit Plans which covers both full-scope and limited-scope employee benefit plan audits.

Question: I work for a bank and need to create an audit program that addresses customer information security and privacy. On 7/1/2001 both the privacy regulations and customer info. security interagency guidelines issued persuant to the Gramm Leach Bliley Act became effective. As a result, controls over customer information must be addressed.

Response: For a start you might want to try the Web Trust Principles and Criteria available here. The AICPA's WebTrust is designed to help financial institutions comply with the new Financial Services Modernization Act  (Graham Leach Bliley) to protect private customer information. You might also check here for more information and an audit program.

Question: Where can I find a HIPAA audit program from IS perspective.

Response: Given the fact that HIPAA or the Health Insurance Portability and Accountability Act is a relatively recent audit area it may be difficult to find specific programs from an IS perspective. There is a HIPAA Checklist available at the following. Program guidance for physician practices can be found here.  The Healthcare Information and Management Systems Society published an article called Implementing HIPAA Security in a Membership Organization that may be helpful. The Illini Chapter of ISACA's March 2001 meeting was on PRIVACY IN THE INTERNET AGE. Privacy of health information was covered.  You might want to contact the chapter for more information. 

Question: I am a fresh IT auditor and would embark on a comprehensive audit exercise of our bank's Information Technology department. We are operating in a UNIX environment and I would like a standard audit plan/program for an IT department.

Response: The first place you should have looked is in the Audit Programs section of this site.  There are audit programs for IT and Unix. Go to the AuditNet Library page and then look in the Audit Guides, Manuals and Checklists Section you should be able to find the FDIC Information Systems Handbook which is a valuable resource for IT auditors.

Question: What are the various types of Audit Programs?

Response: Audits or Audit Programs? There are different types of audits such as financial, compliance, operational, management, performance, quality etc. There are audit programs for each type but within each type there are different areas. For example accounts payable, accounts receivable, purchasing, IT and then there are specific audit programs for specific applications. If you look at the audit programs section of AuditNet you can see the different types of audit programs for different areas.

Question: Do you have any programs relating to the audit of Travel agencies (both inbound and outbound) and Tour wholesalers?

Response: I have not come across any audit programs for travel agencies however there are some meta information resources that you can refer to such as:

Best Practice Guidance on Travel Management

Society of Government Travel Professionals

Question: Do you know where I can find a program for the Internal Audit of a Company Limited) running a TV Channel?

Response: The Association of News Media Internal Auditors should be able to provide you with guidance for audit programs.  They used to have a Web site at http://www.nmiaaudit.org/ but the link is broken.  I would contact the International Newspaper Financial Executives and ask them for assistance   They published a book in 1990 called Internal Auditing & Controls for Newspapers which may still be available. 

Question: Does anyone have any audit programs, materials or websites concerning subrogation?

Response: Subrogation or the substitution of one person in the place of another with respect to a lawful claim, demand or right against a third party, so that the substituted party succeeds to the rights of the other, or "stands in the shoes of" the other, with respect to the claim against the third party. Try the National Association of Subrogation Professionals at http://www.subrogation.org/

Question: I am planning an audit of my companies purchase department and am looking for audit programs to use to provide some guidance on where to begin, key issues to test for, etc.

Response: AuditNet has standard audit programs for purchasing. Look in the Audit Programs section.

Question: Does anyone have an audit program for auditing the security/configuration/etc. of web servers?

Response: There is an e-commerce audit program that deals with Web site security available here.

Question: I am planning an audit of my companies customer service call center and am looking for audit programs to use to provide some guidance on where to begin, key issues to test for, etc. 

Response: There is a call center audit program available on AuditNet. Go to the audit programs section and look in the Information Systems Technology category.

Question: Can I request Revenue and Collection Transaction Cycle Programs and also industry practice (construction/Manufacturing) on collection/credit management?

Response: From the left column click on Audit Programs. Find the Revenue Recognition Audit Guide. That should provide you with the basics for revenue collection and credit management for construction contracts.  

Question:  Is there any available programe for auditing "GEAC-Smartstream" or "Peoplesoft". 

Response: Interesting question! According to my research there is a GEAC Smartstream newsgroup. Another auditor contacted them and received a detailed 47 page audit program.  For information on this go to http://www.itaudit.org/forum/auditcontrol/f209ac_feedback.htm Subscribe to the newsgroup and you should be able to interact with others regarding that product.  For a PeopleSoft Audit Review program go to the Audit Programs page.  There is also a PeopleSoft discussion group.  Go to the AuditNet Library page and click on Security Resources for details.

Question: Would you have any information about Privacy Audits, sample plan, questionnaire, check list, etc.?

Response: Privacy and privacy audits are a relatively new and important area. The audit information available for privacy audits is limited. What is
available has not gone through the evolution many other audit areas have;
that is, the development of generally accepted the best practices for privacy
audits! There are, however, a few good references that should help you
develop a good approach to your privacy audit:

1. Privacy audit questions at www.admari.com/privacy_audit_questions.htm

2. The Privacy Audit: A Primer www2.bc.edu/~jerskey/privacy.htm

3. Privacy Law and Policy Reporter at www.austlii.edu.au/au/other/plpr/1996/40.html

Question: I'm looking for an up-to-date audit program for VM/ESA. Do you know of any?

Response: No, but check the VM/ESA Resources Page for helpful information.

Question: I am currently scoping for a risk management review of an electronic funds trasfer process. Do you have an audit program for the EFT process?

Response: Click here.

Question: Do you know of any Oracle Financials or other Oracle Applications audit programs? I have a lot of Oracle Database audit programs but cannot find anything for Oracle Financials/Applications Functionality or Security audits.

Response: See if these resources are helpful:

Question: I am searching for an "internal control questionnaire" for use by our community bank.

Response: Check out this multipart Bank Branch audit program, in Word format.

Question: Do you know of an audit program for CMSI (Credit Management Solutions Inc.) credit automation software?

Response: No, but you can contact CMSI here and ask them if they have developed an auditor's guide for the system.

Question: Could you please provide any info on audit programs related to telecommunications charges, equipment leasing, and purchases of capitalizable assets?

Response: Try these resources:

Question: computer audit

Response: Here

Question: Would you have programs specifically for the VSE/ESA 2-2-2 system?

Response: No, but here are some VSE/ESA resources:

Question: Do you have an audit program (survey tools) for physician office medical record audits?

Response: See if these resources help:

Question: Would you have audit programs for auditing applications which go through WAP phones and encryption of browsers?

Response: No, but here are some Wireless Access Protocol (WAP) resources that may be helpful:

Question: Do you