IT Auditing and Application Controls for Small and Mid-Sized Enterprises

IT Auditing and Application Controls for Small and Mid-Sized Enterprises
Author: Jason Wood
Publisher: John Wiley & Sons
Total Pages: 448
Release: 2013-12-09
Genre: Business & Economics
ISBN: 1118072618

Essential guidance for the financial auditor in need of a working knowledge of IT If you're a financial auditor needing working knowledge of IT and application controls, Automated Auditing Financial Applications for Small and Mid-Sized Businesses provides you with the guidance you need. Conceptual overviews of key IT auditing issues are included, as well as concrete hands-on tips and techniques. Inside, you'll find background and guidance with appropriate reference to material published by ISACA, AICPA, organized to show the increasing complexity of systems, starting with general principles and progressing through greater levels of functionality. Provides straightforward IT guidance to financial auditors seeking to develop quality and efficacy of software controls Offers small- and middle-market business auditors relevant IT coverage Covers relevant applications, including MS Excel, Quickbooks, and report writers Written for financial auditors practicing in the small to midsized business space The largest market segment in the United States in quantity and scope is the small and middle market business, which continues to be the source of economic growth and expansion. Uniquely focused on the IT needs of auditors serving the small to medium sized business, Automated Auditing Financial Applications for Small and Mid-Sized Businesses delivers the kind of IT coverage you need for your organization.

IT Auditing and Application Controls for Small and Mid-Sized Enterprises

IT Auditing and Application Controls for Small and Mid-Sized Enterprises
Author: Jason Wood
Publisher: John Wiley & Sons
Total Pages: 448
Release: 2013-11-22
Genre: Business & Economics
ISBN: 1118233190

Essential guidance for the financial auditor in need of a working knowledge of IT If you're a financial auditor needing working knowledge of IT and application controls, Automated Auditing Financial Applications for Small and Mid-Sized Businesses provides you with the guidance you need. Conceptual overviews of key IT auditing issues are included, as well as concrete hands-on tips and techniques. Inside, you'll find background and guidance with appropriate reference to material published by ISACA, AICPA, organized to show the increasing complexity of systems, starting with general principles and progressing through greater levels of functionality. Provides straightforward IT guidance to financial auditors seeking to develop quality and efficacy of software controls Offers small- and middle-market business auditors relevant IT coverage Covers relevant applications, including MS Excel, Quickbooks, and report writers Written for financial auditors practicing in the small to midsized business space The largest market segment in the United States in quantity and scope is the small and middle market business, which continues to be the source of economic growth and expansion. Uniquely focused on the IT needs of auditors serving the small to medium sized business, Automated Auditing Financial Applications for Small and Mid-Sized Businesses delivers the kind of IT coverage you need for your organization.

Internal Control Strategies

Internal Control Strategies
Author: Julie Harrer
Publisher: John Wiley & Sons
Total Pages: 308
Release: 2008-12-03
Genre: Business & Economics
ISBN: 0470437618

Praise for Internal Control Strategies A Mid to Small Business Guide "Internal Control Strategies is an excellent field guide for the implementation and maintenance of efficient and effective internal control systems. The book provides a practical approach to interpreting guidance from oversight agencies and integrating it with industry practice in a real-world environment. This handbook is an essential tool for managers and professionals going through the day-to-day struggle of managing auditor expectations and permitting business to proceed in the most efficient manner." -Michael Rodriguez, former senior manager of finance, Qualcomm Incorporated "Internal Control Strategies is the clearest path forward for middle-market SEC registrants and their independent registered public accounting firms as they streamline the SOX 404 compliance process in 2008 and beyond." -Stephen G. Austin, MBA, CPA, Managing Firm Partner,Swenson Advisors, LLP, Regional PCAOB Accounting Firm "Clearly written and practical, Internal Control Strategies is a must-read for every chief audit, finance, or compliance executive." -Jeff Miller, Partner-in-Charge, Business Risk Services,Squar, Milner, Peterson, Miranda & Williamson, LLP "As a CFO of small to mid-sized publicly traded and privately held companies, one is usually faced with the challenge of developing and implementing the right levels of internal controls and compliance within the restrictions of limited financial and human resources. Internal Control Strategies presents the relevant topics in a clear and concise manner, allowing the reader to understand the internal control framework and specific underlying requirements quickly. The author's vast experience with SOX compliance ensures a targeted and pragmatic approach for the successful implementation of internal controls. Her recommendations are 'to the point' and eliminate some of the guesswork we all have experienced while working towards SOX compliance." -Robert S. Stefanovich, Chief Financial Officer, Novalar Pharmaceuticals, Inc. The SEC requires all publicly traded companies to attest to theeffectiveness of their internal controls. Is your business ready? Internal Control Strategies: A Mid to Small Business Guide clearly explains the latest PCAOB, SEC, and COSO guidance, providing you with an effective tool and reference guide for successful implementation of sections 302 and 404 of the Sarbanes-Oxley Act. Extremely knowledgeable and insightful, author Julie Harrer brings practical clarity to this complex topic, leading you step by step in addressing the challenges associated in bringing your business in compliance with SOX.

Auditing Information Systems

Auditing Information Systems
Author: Abraham Nyirongo
Publisher: Trafford Publishing
Total Pages: 150
Release: 2015-03-11
Genre: Computers
ISBN: 1490754970

The role of the information systems auditor is not just about compliance and performance testing but goes beyond by adding value to the enterprise through being an IS advisor to management. This book, whilst covering all the necessary skills in IS auditing, also focuses on the role of the IS auditor in enhancing the performance of the enterprise. The IS auditor is a key member of the enterprise and ensures that technology is used appropriately, protects data, and provides a secure environment. The book outlines the IS audit process in detail, enabling the reader to acquire necessary skills on how to conduct an IS audit. Included in the book are other formative skills, such as IT general controls, applications controls, IT governance, information security, IT risk, and disaster recovery. The book also covers all the necessary technologies an IS auditor requires to learn and understand in order to be an effective auditor. A good flair for technology is a must for one to be a good IS auditor. The book focuses on both learning the technology and developing appropriate evidence-gathering skills.

ISO 27001 Handbook

ISO 27001 Handbook
Author: Cees Wens
Publisher: Independently Published
Total Pages: 286
Release: 2019-12-24
Genre:
ISBN: 9781098547684

This book helps you to bring the information security of your organization to the right level by using the ISO/IEC 27001 standard. An organization often provides services or products for years before the decision is taken to obtain an ISO/IEC 27001 certificate. Usually, a lot has already been done in the field of information security, but after reading the requirements of the standard, it seems that something more needs to be done: an 'information security management system' must be set up. A what? This handbook is intended to help small and medium-sized businesses establish, implement, maintain and continually improve an information security management system in accordance with the requirements of the international standard ISO/IEC 27001. At the same time, this handbook is also intended to provide information to auditors who must investigate whether an information security management system meets all requirements and has been effectively implemented. This handbook assumes that you ultimately want your information security management system to be certified by an accredited certification body. The moment you invite a certification body to perform a certification audit, you must be ready to demonstrate that your management system meets all the requirements of the Standard. In this book, you will find detailed explanations, more than a hundred examples, and sixty-one common pitfalls. It also contains information about the rules of the game and the course of a certification audit. Cees van der Wens (1965) studied industrial automation in the Netherlands. In his role as Lead Auditor, the author has carried out dozens of ISO/IEC 27001 certification audits at a wide range of organizations. As a consultant, he has also helped many organizations obtain the ISO/IEC 27001 certificate. The author feels very connected to the standard because of the social importance of information security and the power of a management system to get better results.

Federal Information System Controls Audit Manual (FISCAM)

Federal Information System Controls Audit Manual (FISCAM)
Author: Robert F. Dacey
Publisher: DIANE Publishing
Total Pages: 601
Release: 2010-11
Genre: Business & Economics
ISBN: 1437914063

FISCAM presents a methodology for performing info. system (IS) control audits of governmental entities in accordance with professional standards. FISCAM is designed to be used on financial and performance audits and attestation engagements. The methodology in the FISCAM incorp. the following: (1) A top-down, risk-based approach that considers materiality and significance in determining audit procedures; (2) Evaluation of entitywide controls and their effect on audit risk; (3) Evaluation of general controls and their pervasive impact on bus. process controls; (4) Evaluation of security mgmt. at all levels; (5) Control hierarchy to evaluate IS control weaknesses; (6) Groupings of control categories consistent with the nature of the risk. Illus.

Standards for Internal Control in the Federal Government

Standards for Internal Control in the Federal Government
Author: United States Government Accountability Office
Publisher: Lulu.com
Total Pages: 88
Release: 2019-03-24
Genre: Reference
ISBN: 0359541828

Policymakers and program managers are continually seeking ways to improve accountability in achieving an entity's mission. A key factor in improving accountability in achieving an entity's mission is to implement an effective internal control system. An effective internal control system helps an entity adapt to shifting environments, evolving demands, changing risks, and new priorities. As programs change and entities strive to improve operational processes and implement new technology, management continually evaluates its internal control system so that it is effective and updated when necessary. Section 3512 (c) and (d) of Title 31 of the United States Code (commonly known as the Federal Managers' Financial Integrity Act (FMFIA)) requires the Comptroller General to issue standards for internal control in the federal government.

Internal Controls Toolkit

Internal Controls Toolkit
Author: Christine H. Doxey
Publisher: John Wiley & Sons
Total Pages: 421
Release: 2019-07-23
Genre: Business & Economics
ISBN: 111955439X

Step-by-step guidance on creating internal controls to manage risk Internal control is a process for assuring achievement of an organization's objectives in operational effectiveness and efficiency, reliable financial reporting, and compliance with laws, regulations, and policies. This is a "toolkit" approach that addresses a practical need for a series of standards of internal controls that can be used to mitigate risk within any size organization. Inadequate internal controls can cause a myriad of problems that adversely affect its ability to provide reliable, timely, and useful financial and managerial data needed to support operating, budgeting, and policy decisions. Reliable data is necessary to make sound business decisions. • Toolkit approach with detailed controls and risks outlined for key business processes • Foundational for SOX 404 initiatives • Key material to improve internal control efforts • Guidance during M&A projects Poor controls over data quality can cause financial data to be unreliable, incomplete, and inaccurate—this book helps you control that quality and manage risk.