Tools
The following tools were published on KnowledgeLeader this week:
IT Audit Update: Audit Committee Report
Utilize this audit report sample to evaluate your organization’s general computer control risks and report on the progress made toward addressing audit findings. Sample procedures to perform include interviewing key members of the management team and other key participants involved with technology infrastructure while leveraging heavily the results of the GCC and (Insert Program or Application) reviews.
Internal Audit Value Scorecards
Manage and measure the performance of your organization’s internal audit function with the various guidelines in this tool. Best practices include documenting internal controls over financial reporting, developing a standard control structure model, tracking enterprise risk management (ERM) action plans, and standardizing the ICFR control structure, identifying application controls.
E-Commerce Website Audit Work Program
Organizations across industries are racing to migrate analog approaches to customers, products, services and operating models to an always-on, real-time and information-rich digital business model. Using technology and digital advances, these organizations are radically improving the performance and reach of their enterprises. Strengthen your e-commerce website's internal audit with our comprehensive E-Commerce Website Audit Work Program.
Accounting Reconciliation Audit Work Program
Optimize your organization's accounting reconciliation accuracy with our comprehensive audit work program. Audit steps include discussing the nature and scope of the audit with key personnel, discussing timing with key management, scheduling timing with the auditee, finalizing the audit program, scheduling staffing as appropriate, and creating a summary scorecard for each process reviewed.
Data Security Policy
Use the best-practice procedures in this policy, including classification, encryption, access control and secure storage measures, to secure your organization’s data. Sensitive data handling procedures outlined in this document include attaching a classification to all documents stored or processed in the company’s electronic systems and
ensuring that the classification applies to all forms of the information asset in a consistent and auditable manner.
Preliminary Controls Self-Assessment Questionnaire
This document includes 11 sample questionnaires that internal audit can use to evaluate management's view of the organization’s internal control environment. The following areas are covered: billing, cash disbursements, fixed assets, information technology general controls, payroll, purchasing and inventory management, and treasury.
Publications
KnowledgeLeader has also published several publications this week.
2024 Finance Trends Survey Report
Protiviti’s latest Global Finance Trends Report reveals a tale of transformation for CFOs whose responsibilities continue to widen. To excel in their expanding roles and support the growth and success of the enterprise, CFOs and finance leaders must apply their expertise, and their influence, throughout the organization. Cyber concerns present a perfect example of transformation in the CFO role. CFOs and finance leaders who have participated in Protiviti’s annual Global Finance Trends Survey consistently view data security and privacy as a top urgency.
Enabling Enterprise AI Adoption Through Next-Generation Governance
Realizing AI’s opportunities and measuring and managing both benefits and risk becomes difficult without appropriate and effective guardrails in place. By implementing effective governance frameworks and policies, organizations can efficiently recognize, comprehend and measure the potential risks and opportunities associated with AI. This whitepaper shares some best practices for aligning AI efforts with the foundational elements of a strong AI governance program, starting with forming an advisory board and defining use cases.
Investing in China: Unpacking the SEC’s Concerns
Audit Analytics has just completed its 20-year analysis of initial public offerings (IPOs), and the results show that non-U.S.-based initial listings were almost half of the initial listings in 2023. In a fairly quiet IPO market, there were 28 non-SPAC China-based companies in those numbers. In this article, Audit Analytics examines the Securities and Exchange Commission’s highlights of critical risks to consider when investing in China.
Recommended Resources
This list of recommended resources from the web may be of interest to you. Click each link to learn more.
- AI Is Coming, but Workforces Feel Unprepared
- How CFOs Can Help Guide AI Strategies and Investments
- From Cash to Credit to Crypto, Exploring How We Think About Money