Performance Auditing Success is All in the Design - Chapters Site
Performance Auditing Success is All in the Design - Chapters Site
Performance Auditing Success is All in the Design - Chapters Site
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Prepared by:<br />
Date Prepared:<br />
Reviewed by:<br />
Index:<br />
Job Title:<br />
Audit Tool: Assess<strong>in</strong>g Audit R<strong>is</strong>ks and Significance (GAS 7.11 through 7.36)<br />
A.1 <strong>Design</strong> and implementation of<br />
<strong>in</strong>ternal controls (GAS 7.11b, 7.16)<br />
Yes No N/A w/p reference or auditors notes if<br />
appropriate<br />
Did <strong>the</strong> department design and implement<br />
policies and procedures for manag<strong>in</strong>g <strong>the</strong><br />
program?<br />
Does <strong>the</strong> department establ<strong>is</strong>h and review<br />
performance measures?<br />
Does <strong>the</strong> department accurately and timely<br />
record documentation?<br />
Are separations of duties establ<strong>is</strong>hed<br />
appropriately?<br />
Is <strong>the</strong> department properly safeguard<strong>in</strong>g<br />
program resources and funds aga<strong>in</strong>st<br />
unauthorized acqu<strong>is</strong>ition, use, or d<strong>is</strong>position<br />
by employees, contractors, grantees, and<br />
recipients of program benefits<br />
Is <strong>the</strong> department properly monitor<strong>in</strong>g<br />
program activities such as contractors for<br />
performance and value of service provided?<br />
A. 2 <strong>Design</strong> and implementation of<br />
<strong>in</strong>formation system <strong>in</strong>ternal controls<br />
(GAS7.11c; 7.24; 7.27)<br />
Are <strong>in</strong>formation systems used extensively<br />
throughout <strong>the</strong> program under audit and/or<br />
for fundamental bus<strong>in</strong>ess processes related<br />
to <strong>the</strong> audit objectives?<br />
Is an understand<strong>in</strong>g of <strong>in</strong>formation systems<br />
controls necessary to assess audit r<strong>is</strong>k and<br />
plan <strong>the</strong> audit with<strong>in</strong> <strong>the</strong> context of <strong>the</strong> audit<br />
objectives?<br />
Are <strong>in</strong>formation systems controls<br />
significant to <strong>the</strong> audit objectives and<br />
<strong>the</strong>refore necessary to evaluate <strong>in</strong> order to<br />
obta<strong>in</strong> sufficient, appropriate evidence?<br />
Are audit procedures related to <strong>in</strong>formation<br />
systems controls needed to obta<strong>in</strong> sufficient,<br />
appropriate evidence to support <strong>the</strong> audit<br />
f<strong>in</strong>d<strong>in</strong>gs and conclusions?<br />
B. Potential for fraud and abuse (GAS<br />
7.11d; 7.30)<br />
Has <strong>the</strong> audit team become aware of<br />
abuse that could be quantitatively or<br />
qualitatively significant to <strong>the</strong> program<br />
under audit?<br />
In <strong>the</strong> team judgment, <strong>is</strong> <strong>the</strong> program or<br />
activity covered by <strong>the</strong> audit objectives<br />
susceptible to a significant r<strong>is</strong>k of fraud<br />
from m<strong>is</strong>appropriation or m<strong>is</strong>use of<br />
assets, or m<strong>is</strong>statement of program<br />
<strong>in</strong>formation <strong>in</strong> order to obta<strong>in</strong><br />
government benefits?<br />
√<br />
√<br />
√<br />
√<br />
√<br />
Policies and procedures are highlighted <strong>in</strong><br />
<strong>the</strong> Service Level Agreement with<br />
Department.<br />
<strong>Performance</strong> measures are establ<strong>is</strong>hed <strong>in</strong><br />
<strong>the</strong> Service Level Agreement, but<br />
frequency of review <strong>is</strong> not <strong>in</strong>cluded.<br />
We found time lags with <strong>the</strong> project<br />
management system. Additionally, we<br />
found <strong>the</strong> system <strong>is</strong> dependent on project<br />
managers to <strong>in</strong>put and th<strong>is</strong> has been done<br />
<strong>in</strong>cons<strong>is</strong>tently.<br />
Prelim<strong>in</strong>ary review suggests some<br />
duplication of efforts.<br />
We don’t have reason to believe <strong>the</strong>y are<br />
not, but will review th<strong>is</strong> <strong>is</strong>sue.<br />
√<br />
Departments d<strong>is</strong>cuss program activity and<br />
custom update reports are provided<br />
monthly.<br />
Yes No N/A w/p reference or auditors notes if<br />
appropriate<br />
√<br />
√<br />
√<br />
Note: Primary <strong>in</strong>formation systems used<br />
are….<br />
Note: Audit staff will be provided with<br />
<strong>in</strong>formation system tra<strong>in</strong><strong>in</strong>g prior to<br />
fieldwork.<br />
Audit staff will review f<strong>in</strong>ancial systems<br />
controls to prevent <strong>in</strong>put error.<br />
√<br />
Audit staff will test f<strong>in</strong>ancial systems<br />
controls to prevent <strong>in</strong>put error us<strong>in</strong>g<br />
quantitative methods.<br />
Yes No N/A w/p reference or auditors notes if<br />
appropriate<br />
√<br />
√<br />
The team has not been made aware of<br />
waste, fraud or abuse to obta<strong>in</strong> government<br />
benefits dur<strong>in</strong>g our survey phase.<br />
Page 4 of 5