|
|
Based on the type of review, each portion of the audit will take more or less time. However, all audits, except for the most basic, will include the following five steps:
STEP 1: PLANNING
We begin each audit with a Planning phase which does not usually require departmental involvement. The audit staff will review any past audit work, look over available literature on the department, and make a preliminary review of departmental income and expense. During this time, the auditors will also tentatively formulate our scope and audit plan, on which they will base the fieldwork.
STEP 2: INTRO MEETING
After you receive your introductory letter announcing the audit, we will call you to schedule an Introductory Meeting. These meetings typically last no longer than an hour and take place at your office, if possible. At this time you have the opportunity to meet the audit staff and ask questions about the upcoming audit work and the audit process. We encourage you to discuss any concerns you may have and any areas or business functions that you would like auditors to review. During the meeting, we will discuss the potential timeframe for the review, the audit objectives, and the audit logistics (facilities, availability of personnel, primary contacts, etc.). At this time, you may also provide the staff with the few pieces of information we request before each audit begins- a departmental organization chart, a contact list, and literature describing the department- if available.
STEP 3: FIELDWORK
In this step, the actual work of the audit is performed. The audit staff begins the Fieldwork by gathering information about the auditee's operations, gaining an understanding of departmental functions, and identifying areas of weakness and concern (as well as strengths). This work includes reviewing financial and budgeting activity, administrative and business procedures, critical departmental functions, information technology, and other activities specific to each auditee. The audit staff will conduct interviews with key personnel, observe departmental procedures, and periodically review the audit progress with the department heads and personnel. You many contact us at anytime throughout the audit with your questions or concerns regarding the audit process or audit findings. During the fieldwork, which is typically the lengthiest part of the audit, the audit staff identifies areas of risk and concern within the department's internal controls and procedures, all of which will be discussed with you before or at the conclusion of the fieldwork.
STEP 4: REPORTING
After the fieldwork is completed and our findings and concerns have been reviewed with you, the audit staff will first prepare a Draft Report. The draft report is transmitted to you for your review and in order for you to prepare your response. Responses typically include corrective action plans, the parties responsible for the action, and the timeline to complete the process. Once your response is received and we agree on the report text, the report is ready to be finalized. Your response is incorporated or attached where appropriate, and the Final Report is delivered to you and the appropriate parties in University management and the departmental reporting line. You will be given the opportunity to review the final report before the distribution is completed.
STEP 5: FOLLOW-UP
Depending on the nature of the audit or the audit findings, the Follow-Up procedure may formal or informal. In either case, after a reasonable period of time, the auditee will be contacted regarding the departmental progress with the corrective actions identified in the audit. At this time, we may perform a follow-up review concluding with a follow-up report. In most cases, the auditee is only contacted informally, possibly several times, to monitor the status of the department's progress. If you have any questions or new concerns in the follow-up period, we welcome you to share them at this time, so that we may determine if further
audit work is necessary
اللهم اغفر لوالدي وارحمه وعافة واعفوا عنه واكرم نزلة ووسع مدخلة واغسلة بالماء والثلج والبرد ونقه من الذنوب والخطايا كما ينقا الثوب الابيض من الدنس برحمتك ياارحم الراحمين






Financial Audit
A historically oriented, independent evaluation performed for the purpose of attesting to the fairness, accuracy, and reliability of financial data. CSULB's external auditors, KPMG, perform this type of review. CSULB's Director of Financial Reporting coordinates the work of these auditors on our campus.Operational Audit
A future-oriented, systematic, and independent evaluation of organizational activities. Financial data may be used, but the primary sources of evidence are the operational policies and achievements related to organizational objectives. Internal controls and efficiencies may be evaluated during this type of review.Department Review
A current period analysis of administrative functions, to evaluate the adequacy of controls, safeguarding of assets, efficient use of resources, compliance with related laws, regulations and University policy and integrity of financial information.Information Systems (IS) Audit
There are three basic kinds of IS Audits that may be performed:
- General Controls Review
A review of the controls which govern the development, operation, maintenance, and security of application systems in a particular environment. This type of audit might involve reviewing a data center, an operating system, a security software tool, or processes and procedures (such as the procedure for controlling production program changes), etc.- Application Controls Review
A review of controls for a specific application system. This would involve an examination of the controls over the input, processing, and output of system data. Data communications issues, program and data security, system change control, and data quality issues are also considered.- System Development Review
A review of the development of a new application system. This involves an evaluation of the development process as well as the product. Consideration is also given to the general controls over a new application, particularly if a new operating environment or technical platform will be used.
تعليمات المشاركة
|
لا تستطيع إضافة مواضيع جديدة
لا تستطيع الرد على المواضيع
لا تستطيع إرفاق ملفات
لا تستطيع تعديل مشاركاتك
BB code is متاحة
الابتسامات متاحة
كود [IMG] متاحة
كود HTML معطلة
|