Standards for Internal Control in the Federal Government


Book Description

Policymakers and program managers are continually seeking ways to improve accountability in achieving an entity's mission. A key factor in improving accountability in achieving an entity's mission is to implement an effective internal control system. An effective internal control system helps an entity adapt to shifting environments, evolving demands, changing risks, and new priorities. As programs change and entities strive to improve operational processes and implement new technology, management continually evaluates its internal control system so that it is effective and updated when necessary. Section 3512 (c) and (d) of Title 31 of the United States Code (commonly known as the Federal Managers' Financial Integrity Act (FMFIA)) requires the Comptroller General to issue standards for internal control in the federal government.







Government Auditing Standards - 2018 Revision


Book Description

Audits provide essential accountability and transparency over government programs. Given the current challenges facing governments and their programs, the oversight provided through auditing is more critical than ever. Government auditing provides the objective analysis and information needed to make the decisions necessary to help create a better future. The professional standards presented in this 2018 revision of Government Auditing Standards (known as the Yellow Book) provide a framework for performing high-quality audit work with competence, integrity, objectivity, and independence to provide accountability and to help improve government operations and services. These standards, commonly referred to as generally accepted government auditing standards (GAGAS), provide the foundation for government auditors to lead by example in the areas of independence, transparency, accountability, and quality through the audit process. This revision contains major changes from, and supersedes, the 2011 revision.




Audit Guide


Book Description

Want to ensure effective and efficient execution of the Risk Assessment Standards? AICPA has the resources you need: Audit Risk Assessment Tool (available online only) Assessing and Responding to Audit Risk in a Financial Statement Audit - AICPA Audit Guide The Audit Risk Assessment Tool walks an experienced auditor through the risk assessment procedures and documents those decisions necessary to prepare an effective and efficient audit program. Designed to be used in lieu of cumbersome checklists, it provides a top down risk-based approach to the identification of high risk areas to allow for appropriate tailoring of audit programs which will result in audit efficiencies. The tool is available in the Online Subscription format and includes access to the full Risk Assessment Guide. The AICPA Audit Guide Assessing and Responding to Audit Risk in a Financial Statement Audit is the definitive source for guidance on applying the core principles of the risk-based audit methodology that must be used on all financial statement audits. This guide is written in an easy-to-understand style that enables auditors of all experience levels to find answers to the issues they encounter in the field. Unique insights, examples and a comprehensive case study clarify critical concepts and requirements. Disclaimer This Audit Risk Assessment Tool is designed to provide illustrative information with respect to the subject matter covered and is recommended for use on audit engagements that are generally smaller in size and have less complex auditing and accounting issues. It is designed to help identify risks, including significant risks, and document the planned response to those risks. The Audit Risk Assessment Tool should be used as a supplement to a firm's existing planning module whether in a firm-based or commercially provided methodology. The Audit Risk Assessment Tool is not a complete planning module. The AICPA recommends the Audit Risk Assessment Tool be completed by audit professionals with substantial accounting, auditing and specific industry experience and knowledge. For a firm to be successful in improving audit quality and efficiencies, it is recommended that a 5+ years experienced auditor completes the Audit Risk Assessment Tool or the engagement team member with the most knowledge of the industry and client (often Partner in small/medium firms) provides insight to whomever is completing the ARA Tool. The AICPA recommends this should not be delegated to lower-level staff and just reviewed – it should be completed under the direction of the experienced auditor (if you delegate to inexperienced auditor you will be at risk for less effectiveness and efficiencies because the tool is intended to be completed by an experienced auditor). The Audit Risk Assessment Tool does not establish standards or preferred practices and is not a substitute for the original authoritative auditing guidance. In applying the auditing guidance included in this Audit Risk Assessment Tool, the auditor should, using professional judgment, assess the relevance and appropriateness of such guidance to the circumstances of the audit. This document has not been approved, disapproved, or otherwise acted on by a senior committee of the AICPA. It is provided with the understanding that the staff and publisher are not engaged in rendering legal, accounting, or other professional service. All such information is provided without warranty of any kind.




The Complete Guide to Business Risk Management


Book Description

Risk management and contingency planning has really come to the fore since the first edition of this book was originally published. Computer failure, fire, fraud, robbery, accident, environmental damage, new regulations - business is constantly under threat. But how do you determine which are the most important dangers for your business? What can you do to lessen the chances of their happening - and minimize the impact if they do happen? In this comprehensive volume Kit Sadgrove shows how you can identify - and control - the relevant threats and ensure that your company will survive. He begins by asking 'What is risk?', 'How do we assess it?' and 'How can it be managed?' He goes on to examine in detail the key danger areas including finance, product quality, health and safety, security and the environment. With case studies, self-assessment exercises and checklists, each chapter looks systematically at what is involved and enables you to draw up action plans that could, for example, provide a defence in law or reduce your insurance premium. The new edition reflects the changes in the global environment, the new risks that have emerged and the effect of macroeconomic factors on business profitability and success. The author has also included a set of case studies to illustrate his ideas in practice.




Audit Risk Assessment Made Easy


Book Description

Teaches auditors how to use risk assessment to plan their engagements.




Risk-Based Auditing


Book Description

The role of internal audit is changing. The Sarbanes-Oxley legislation in the US and the Combined Code for Corporate Governance in the UK focused on the need to demonstrate the active management of risks and report on this subject to shareholders. Boards of Directors are therefore increasingly requiring their Internal Audit functions to provide a much higher level of assurance in this regard. Phil Griffiths' Risk-Based Auditing explains the concepts and practice behind a risk-based approach to auditing. He explores the changing environment in both the private and public sectors and the associated legislation and guidance. The book then provides a blueprint for refocusing the internal audit role to embrace risk and to help plan, market, undertake and report a risk-based audit. The text includes a detailed risk-based audit toolkit with 14 sections of tools, techniques and information to enable a risk-based approach to be adopted. This is an essential guide for internal and external auditors seeking to manage the realities of the audit function in the turbulent and fast-changing business environment that has emerged since the end of the last century.




Enterprise Risk Management and COSO


Book Description

Praise for Enterprise Risk Management and COSO: A Guide for Directors, Executives, and Practitioners "Enterprise Risk Management and COSO is a comprehensive reference book that presents core management of risk tools in a helpful and organized way. If you are an internal auditor who is interested in risk management, exploring this book is one of the best ways to gain an understanding of enterprise risk management issues." —Naly de Carvalho, FSA Times "This book represents a unique guide on how to manage many of the critical components that constitute an organization's corporate defense program." —Sean Lyons, Corporate Defense Management (CDM) professional "This book provides a comprehensive analysis of enterprise risk management and is invaluable to anyone working in the risk management arena. It provides excellent information regarding the COSO framework, control components, control environment, and quantitative risk assessment methodologies. It is a great piece of work." —J. Richard Claywell, CPA, ABV, CVA, CM&AA, CFFA, CFD "As digital information continues its exponential growth and more systems become interconnected, the demand and need for proper risk management will continue to increase. I found the book to be very informative, eye-opening, and very pragmatic with an approach to risk management that will not only add value to all boards who are maturing and growing this capability, but also will provide them with competitive advantage in this important area of focus." —David Olivencia, President, Hispanic IT Executive Council Optimally manage your company's risks, even in the worst of economic conditions. There has never been a stronger need for sound risk management than now. Today's organizations are expected to manage a variety of risks that were unthinkable a decade ago. Insightful and compelling, Enterprise Risk Management and COSO reveals how to: Successfully incorporate enterprise risk management into your organization's culture Foster an environment that rewards open discussion of risks rather than concealment of them Quantitatively model risks and effectiveness of internal controls Best discern where risk management resources should be dedicated to minimize occurrence of risk-based events Test predictive models through empirical data




Auditing that Matters


Book Description

This is the companion Discussion Guide to Auditing that Matters: Case Studies. The intent is for this pair of books to be used by internal auditors as a basis for group or individual discussions around world-class practices. Each individual should have a copy of the Case Studies and the leader of the discussion should have a copy of this Discussion Guide. Many of the principles discussed here can be found in Auditing that Matters.