Audit Planning and Management
Audit Planning and Management
Audit Planning and Management
4/21/201112:44PM
4/21/201112:44PM
Shortrun/termplanspuprpose :
Toidentifythoseareaswithinorganizationsthat needtobeauditedwithaviewtoreducingthe d t b dit d ith i t d i th exposuresfacedbytheorganizationtoan acceptablelevel. p
4/21/201112:44PM 3
4/21/201112:44PM
Low amountsofIS
auditplanning di l i Extensiveshort runISaudit IS dit High planning
4/21/201112:44PM
Havinganimpactonorganizations missionsandgoalviaanISauditfunction d l d f
affects ff t
Organizational missionand goals
ShortrunplanningbasedonRisk management t
Risk management program Riskmanagementprogram
Enabletoidentifywherewhe shoulddothe detailedworkassociatedwithanauditora detailed work associated with an audit or a securityprogramandhowoverallwecanbeginto managethelevelofauditriskassociatedwithan organization.
affects ff t affects
ISfunction outcomes ISAudit function
affects
4/21/201112:44PM
4/21/201112:44PM
Riskmanagementprogram g p g
Enable to identify where whe should do the Enabletoidentifywherewhe shoulddothe detailedworkassociatedwithanauditora securityprogramandhowoverallwecan security program and how overall we can begintomanagethelevelofauditrisk associatedwithanorganization. associated with an organization
Riskmanagementprogramare variationonafewbasicstep f b
1. Identifytheunitofanalysis 1 Identify the unit of analysis 2. Identifyasetegeneric riskpertinenttothe unitofanalysis unit of analysis 3. Determineariskweightingforeachunitof analysis l i 4. Prioritizeaudits(securityevaluations)based onriskweighting 5. Determinetheresourcesneededtosupport pp theprogramofaudittobeconducted
9 4/21/201112:44PM 10
4/21/201112:44PM
4/21/201112:44PM
11
4/21/201112:44PM
12
Staffvs Linefunction
Staff Staff
Auditmanager Audit manager (partner)
Staffvs Linefunction
LineFunction
Auditmanager Audit manager (partner)
Auditteam1 manager
Auditteam2 manager
ISAudit manager
Auditteam1 manager
Auditteam2 manager
Auditteam3 manager
Generalstaff G l t ff auditor
4/21/201112:44PM
13
4/21/201112:44PM
14
LeadershipProcess p
Observation feedback
4/21/201112:44PM 15 4/21/201112:44PM 16
4/21/201112:44PM
17