Internal Control Audit and Compliance. Documentation and Testing Under the New COSO Framework

Essential guidance on the revised COSO internal controls framework Need the latest on the new, revised COSO internal controls framework? Executive's Guide to COSO Internal Controls provides a step-by-step plan for installing and implementing effective internal controls with an emphasis on building improved IT as well as other internal controls and integrating better risk management processes. The COSO internal controls framework forms the basis for establishing Sarbanes-Oxley compliance and internal controls specialist Robert Moeller looks at topics including the importance of effective systems on internal controls in today's enterprises, the new COSO framework for effective enterprise internal controls, and what has changed since the 1990s internal controls framework. Written by Robert Moeller, an authority in internal controls and IT governance Practical, no-nonsense coverage of all three dimensions of the new COSO framework Helps you change systems and processes when implementing the new COSO internal controls framework Includes information on how ISO internal control and risk management standards as well as COBIT can be used with COSO internal controls Other titles by Robert Moeller: IT Audit, Control, and Security, Executives Guide to IT Governance Under the Sarbanes-Oxley Act, every corporation has to assert that their internal controls are adequate and public accounting firms certifying those internal controls are attesting to the adequacy of those same internal controls, based on the COSO internal controls framework. Executive's Guide to COSO Internal Controls thoroughly considers improved risk management processes as part of the new COSO framework; the importance of IT systems and processes; and risk management techniques.

When it comes to computer security, the role of auditors today has never been more crucial. Auditors must ensure that all computers, in particular those dealing with e-business, are secure. The only source for information on the combined areas of computer audit, control, and security, the IT Audit, Control, and Security describes the types of internal controls, security, and integrity procedures that management must build into its automated systems. This very timely book provides auditors with the guidance they need to ensure that their systems are secure from both internal and external threats.

Internal Audit: Efficiency Through Automation teaches state-of-the-art computer-aided audit techniques, with practical guidelines on how to get much needed data, overcome organizational roadblocks, build data analysis skills, as well as address Continuous Auditing issues. Chapter 1 CAATTs History, Chapter 2 Audit Technology, Chapter 3 Continuous Auditing, Chapter 4 CAATTs Benefits and Opportunities, Chapter 5 CAATTs for Broader Scoped Audits, Chapter 6 Data Access and Testing, Chapter 7 Developing CAATT Capabilities, Chapter 8 Challenges for Audit,

Sarbanes-Oxley and the New Internal Auditing Rules thoroughly and clearly explains the Sarbanes-Oxley Act, how it impacts auditors, and how internal auditing can help with its requirements, such as launching an ethics and whistle-blower program or performing effective internal controls reviews under the COSO framework. With ample coverage of emerging rules that have yet to be issued and other matters subject to change, this book outlines fundamental blueprints of the new rules, technological developments, and evolving trends that impact internal audit professionals. Order your copy today!

Deliver increased value by embedding quality into internal audit activities Internal Audit Quality: Developing a Quality Assurance and Improvement Program is a comprehensive and authoritative guide to better practice internal auditing. Written by a global expert in audit quality, this guide is the first to provide complete coverage of the elements that comprise an effective internal audit quality assurance and improvement program. Readers will find practical solutions for monitoring and measuring internal audit performance drawn from The IIA's International Standards for the Professional Practice of Internal Auditing, and complemented by advice and case studies from leading audit practitioners from five different continents. Major corporate and financial collapses over the past decade have challenged the value of internal audit. With an increased focus on internal audit's role in good governance, management is increasingly demanding that internal audit provides assurance of the quality of its own activities. The IIA standards provide a framework for audit quality in the form of mandatory guidance . Recent research indicates that the majority of internal audit functions do not fully comply with the standards and, as a result, are not servicing the needs of their organizations as well as they might. Internal Audit Quality offers a roadmap to internal audit quality, providing readers the guidance they need to: Embed quality into all elements of internal audit from strategic and operational planning down to day-to-day tasks Create well-defined internal audit programs and procedures Independently self-assess internal audit quality and performance Conform with the IIA standards and better practice Provide assurance over internal audit efficiency and effectiveness Deliver value by meeting stakeholder expectations As a key component of good governance, internal audit is on the rise. The days of retrospective, compliance-focused auditing is a thing of the past. Organizations expect more of internal audit, and many internal audit activities are accepting the challenge. Rather than relying on audit supervision and external assessments, modern auditors are embedding quality into audit activities to create effective programs. For the auditor looking to distinguish themselves as leading edge, Internal Audit Quality provides the guidance that enables the right work, at the right time, in the right way.

Praise for Executive Roadmap to Fraud Prevention and Internal Control «Our nation is faced with dual alarming trends of record highs in white-collar crime and seemingly record lows in ethics. The solution cannot be left only to legislators, regulators, and law enforcement. It requires the attention of all of us in business to create a culture of compliance. This new book by Martin Biegelman and Joel Bartow is an invaluable resource to achieving the highest levels of compliance.» –Kenneth J. Hunter, former chief postal inspector and former president & CEO of the Council of Better Business Bureaus «This is a timely and thought-provoking addition to fraud and risk management literature. For seasoned executives who are navigating the maze of compliance, legislative requirements, and increasingly sophisticated criminal activity, this book will be a frequent reference and guide. Neophyte managers will gain years of insight and direction that can only benefit their organizations. Academics, both faculty and students, will learn from the authors' ability to apply theory to high-level practice.» –Gary R. Gordon, EdD, Professor of Economic Crime Management and Executive Director, Economic Crime Institute of Utica College «All executives need to protect themselves and their organizations from the potentially catastrophic damage fraud can cause, both financially and reputationally. This new book is a very clear and practical guide to achieving that goal.» –Toby J. F. Bishop, President and Chief Executive Officer, Association of Certified Fraud Examiners «This book is a must-read for anyone eager to understand–and prevent–the toxic mix of temptations that can destroy a company's reputation overnight. The authors, both seasoned former fraud investigators, bring a unique, clear-eyed perspective to the topic of corporate fraud. They have seen it all, and their book is an invaluable reference for senior management, compliance executives, in-house lawyers, and anyone else who cares about corporate integrity.» –Leslie R. Caldwell, Partner, Morgan Lewis & Bockius former director, U.S. Department of Justice Enron Task Force «Excellent resource! A great guide for corporate management in the post-Enron world.» –Karen A. Popp, Partner, Sidley Austin Brown & Wood LLP and former associate counsel to President Bill Clinton and former federal prosecutor

A fully updated, step-by-step guide for implementing COSO's Enterprise Risk Management COSO Enterprise Risk Management, Second Edition clearly enables organizations of all types and sizes to understand and better manage their risk environments and make better decisions through use of the COSO ERM framework. The Second Edition discusses the latest trends and pronouncements that have affected COSO ERM and explores new topics, including the PCAOB's release of AS5; ISACA's recently revised CobiT; and the recently released IIA Standards. Offers you expert advice on how to carry out internal control responsibilities more efficiently Updates you on the ins and outs of the COSO Report and its emergence as the new platform for understanding all aspects of risk in today's organization Shows you how an effective risk management program, following COSO ERM, can help your organization to better comply with the Sarbanes-Oxley Act Knowledgeably explains how to implement an effective ERM program Preparing professionals develop and follow an effective risk culture, COSO Enterprise Risk Management, Second Edition is the fully revised, invaluable working resource that will show you how to identify risks, avoid pitfalls within your corporation, and keep it moving ahead of the competition.

"How can you argue with the core principles of Lean, that you focus on what provides value to your customer and eliminate work that is not necessary (muda)? Internal auditors need to understand not only who their primary customers are, but what is valuable to them – which in most cases is assurance that the risks that matter to the achievement of objectives are properly managed. We need to communicate what they need to know and not what we want to say. This incessant focus on the customer and the efficient production of a valued product should extend to every internal audit team. How else can we ensure that we optimize the use of our limited resources to address the dynamic business and risk environment within which our organizations operate?" Norman Marks, GRC Thought Leader Using lean techniques to enhance value add and reduce waste in internal auditing Lean Auditing is a practical guide to maximising value and efficiency in internal audit through the application of lean techniques. It is an ideal book for anyone interested in understanding what progressive, value adding audit can be like. It is also ideal for anyone wondering whether audit activities can be streamlined or better co-ordinated with other activities. The book contains practical advise from the author's experience as CAE of AstraZeneca PLC; from his work as a consultant specializing in this field; as well as insights from leading CAEs in the UK, US and elsewhere. In addition, there are important insights from thought leaders such as Richard Chambers (IIA US) and Norman Marks (GRC thought leader) and Chris Baker (Technical Manager of the IIA UK). Increasing pressure on resources is driving a need for greater efficiency in all areas of business, and Internal Audit is no exception. Lean techniques can help streamline the workflow, but having only recently been applied to IA, lack the guidance available for other techniques. Lean Auditing fills this need by combining expert instruction and actionable advice that helps Internal Auditors: Benchmark their efficiency against lean ways of working Understand warning signs of waste and lower added value Understanding practical ways of working that improve added value and reduce waste Gain confidence about progressive ways of working in internal audit Understand how improved ways of working in audit can positively impact the culture of the wider organization One of the keys to the lean audit is finding out exactly what the stakeholder wants, and eliminating everything else. Scaling back certain operations can delineate audit from advisory, and in the process, dramatically improve crucial outcomes. To this end, Lean Auditing is the key to IA efficiency.

IT Compliance and Controls offers a structured architectural approach, a 'blueprint in effect,' for new and seasoned executives and business professionals alike to understand the world of compliance?from the perspective of what the problems are, where they come from, and how to position your company to deal with them today and into the future.

The financial services industry is undergoing significant change. This has added challenges for institutions assessing their operations and internal controls for regulatory considerations. Updated for 2019, this industry standard resource offers comprehensive, reliable accounting implementation guidance for preparers. It offers clear and practical guidance of audit and accounting issues, and in-depth coverage of audit considerations, including controls, fraud, risk assessment, and planning and execution of the audit. Topics covered include: Transfers and servicing; Troubled debt restructurings; Financing receivables and the allowance for loan losses; and, Fair value accounting This guide also provides direction for institutions assessing their operations and internal controls for regulatory considerations as well as discussions on existing regulatory reporting matters. The financial services industry is undergoing significant change. This has added challenges for institutions assessing their operations and internal controls for regulatory considerations. Updated for 2019, this industry standard resource offers comprehensive, reliable accounting implementation guidance for preparers. It offers clear and practical guidance of audit and accounting issues, and in-depth coverage of audit considerations, including controls, fraud, risk assessment, and planning and execution of the audit. Topics covered include: Transfers and servicing; Troubled debt restructurings; Financing receivables and the allowance for loan losses; and, Fair value accounting This guide also provides direction for institutions assessing their operations and internal controls for regulatory considerations as well as discussions on existing regulatory reporting matters.