战略系统审计

– “The primary goal of management control is to ensure that risk monitoring and control activities are aligned properly with overall strategic objectives” p. 35
Computer-Assisted Audit
Techniques
Business Objectives
Financial Risk
Project
Management
Stakeholders
Risks
Energy Trading Risk
Business Resilience
Business Process
Audit Risks
Key Risk
Key Risk
Key Risk
Key Risk
Key Risk 战略系统审计
Scoping: Analytical Procedures
– High Level
• Understand the business • Identify areas of risk
• Measure and benchmark process performance • Document understanding of the client’s ability to
create value and generate future cash flows using a client business model, process analyses, key performance indicators, and a business risk profile
战略系统审计
2020/11/19
战略系统审计
Scoping: Forming a Point of View
– Perform company and industry analytical procedures – Research and analyze external communications – Partners connect with staff members – Document the team’s understanding of the business – Knowledge broker to capture and share industry
• Can we audit that comfort?
ACCEPTANCE/CONTINUANCE ASSESSMENT
Market Strategy Overview
Value Creating Activities
Financial Performance
SIGNIFICANT CONTROLS COMFORT
• Quality of earnings are assessed
• Process performance evaluated on
– Cycle time – Process quality – Process cost
战略系统审计
Scoping: Audit Team of Specialists
• Transaction based auditing procedures are applied to non-routine transactions and non-routine and highly judgmental accounting estimates (p. 36).
• Computer audit techniques filter routine transactions for unusual items
战略系统审计
Business Measurement
• Use the comprehensive business knowledge decision frame to develop expectations about key assertions embodied in the overall financial statements
information – Form a point of view on the risks that management
should be concerned about
战略系统审计
Scoping: Business Analysis Framework
战略系统审计
战略系统审计
Strategic Analysis
Account Balances and Transactions
Account Balances and Transactions
Account Balances and Transactions
General Computer Controls
Financial Statement Assertions/ Audit Objectives
NO/LIMITED CONTROLS
COMFORT
SUBSTANTIVE AUDIT EVIDENCE
• Compare reported financial result to expectations and design additional audit test work to address any gaps between expectations and reported results
– Disaggregated Account Level
• Determine the nature, timing & extent of testing
– External benchmarking to peers, market trends
• Looking for anomalies, areas of risk • Use of extensive knowledge management tools
level? – Do accounting choices and disclosures adequately
reflect uncontrolled risks? – Groups residual business risk by financial statement
assertion
战略系统审计
战略系统审计
Connecting the Dots …
Business Objectives
Business Process A • Completeness • Accuracy • Validity • Restricted Access
Business Risks
related to achieving Objectives
•…… •…… •……
Business Process B • Completeness • Accuracy • Validity • Restricted Access
Business Process C • Completeness • Accuracy • Validity • Restricted Access
Enterprise-wide Risk
Controls
Security
Performance Improvement Internal Audit
Systems & Technology
Data Risk
Fraud
Alignment
Regulatory/ Compliance
Treasury
Our best teams use our specialist capabilities to help in forming a point of view.
Scoping Translated into Audit Strategy
Business Objectives
Stakeholders
Risks
Controls
Alignment
Where controls over significant account balances or classes of transaction are not aligned, we will need to perform substantive tests of details.
available
战略系统审计
Business Process Analysis
• Understand the key processes and related competencies needed to realize strategic advantage
– Process driven competition
• Understand the client’s strategic advantage
战略系统审计
战略系统审计
Baidu Nhomakorabea
战略系统审计
Risk Assessment
• Understand the risks that threaten attainment of the client’s business objectives
– Strategic risks – Process risks
战略系统审计
Scoping: Risk Assessment – Key Risks
Business Risks
We identify audit risk through
Kunedyerrisstkasnadrinegthtohseeecnotnitdyi’stions or fbaucstoinresswsiothbijnecatnivaeusdaint dthraetl,aitned trhisekjsu.dgment of the auditor, give rise to a greater risk of material financial misstatement or other matters resulting in the issuance of an inappropriate audit report.
战略系统审计
Audit Comfort Cycle
4 Key Questions
• What does management need to get comfort on?
• How does management get comfort?
• Are they entitled to that comfort?
战略系统审计
战略系统审计
Assess implications for business and audit
– Is risk identification complete? – Are they prioritized properly? – Are there controls to minimize risks to acceptable
• Additional test work is performed when interrelated financial and Nonfinancial performance measures are inconsistent and when key financial-statement assertions are not consistent with the auditor’s understanding of the organization’s strategic-systems dynamic
Classes of Transactions • Occurrence • Completeness • Accuracy • Cutoff • Classification Account Balances • Rights &
Obligations • Existence • Completeness • Accuracy/Valuation Presentation & Disclosure • Occurrence/R&O • Completeness • Understandability • Accuracy/Valuation