institute of internal auditors in b&h - Udruženje internih revizora BiH

Višnja Komnenic, univ.spec. inf., dipl. ing. el.
"ICT Security Audit according ISO 27001 and 27002 "
In all modern companies that rely on information system in ther operations, there is a need for
for internal audit of IT system safety. The whole auditing process as well as IT security auditing
depends on the concept of internal controls in all parts of business. Top management must be
assured that the company IT systems operates in a controlled environment and that the adequate
controls are in place. Exactly of that the clear vision of the future of providing IT security audits
can be perceived, as well as the future development of IT audit profession.
Sonja Jovanovic, Ernst & Young d.o.o. Beograd
Natasa Vuksic, Ernst & Young d.o.o. Beograd
"Code of ethics, comunication in internal audit"
An effective Internal Audit function has to find the balance between risk, cost and value. Not
having that balance results in sub-optimization creates a value gap. Issues could lie in the areas
of enablement or competency, or both. From an enablement perspective, Internal Audit may
not be aligned with the business risks, may be using out-of-date technology or may not know
how to prioritize effectively. In terms of capabilities, the Internal Audit function may not have
the industry insight and functional insight it needs. It may have inflexible staffing models. Or it
may lack skills in specific areas, such as tax or IT. Both types of gaps can limit Internal Audit’s
ability to operate at higher levels. Identifying these challenges — and establishing solutions to
address them — will form the foundation of the business case for change.
Prof. dr. Vera Leko
dr. Danica Leko
"Contol of public finances"
Studies on issues of public finances’ controls on international level, and especially in Serbia, are
covered in this paper. By analyzing world trends in the sphere of public assets’ control, it can be
concluded that currently there is almost no county without some kind of state control over
public finances. In most of the countries, supervision over public assets is under direct or
indirect supervision of the Parliament. Parliament, as the highest Regulatory body approving the
level of public assets (incomes and expenses) is controlling annual financial reports as well as
the efficiency of national asset consumption. Studies of this subject on international level are
showing that each country within their own scope of controls is giving special contribution on
establishment of internal control system. In western developed countries, this internal
professional control mechanism over the public asset is done by the internal control. In order to
put in place this control, most of the parliaments abroad have brought laws on public assets’
audit, which is therefore becoming professional control function.
11