FISCAM presents a methodology for performing info. system (IS) control audits of governmental entities in accordance with professional standards. FISCAM is designed to be used on financial and performance audits and attestation engagements. The methodology in the FISCAM incorp. the following: (1) A top-down, risk-based approach that considers materiality and significance in determining audit procedures; (2) Evaluation of entitywide controls and their effect on audit risk; (3) Evaluation of general controls and their pervasive impact on bus. process controls; (4) Evaluation of security mgmt. at all levels; (5) Control hierarchy to evaluate IS control weaknesses; (6) Groupings of control categories consistent with the nature of the risk. Illus.

Policymakers and program managers are continually seeking ways to improve accountability in achieving an entity's mission. A key factor in improving accountability in achieving an entity's mission is to implement an effective internal control system. An effective internal control system helps an entity adapt to shifting environments, evolving demands, changing risks, and new priorities. As programs change and entities strive to improve operational processes and implement new technology, management continually evaluates its internal control system so that it is effective and updated when necessary. Section 3512 (c) and (d) of Title 31 of the United States Code (commonly known as the Federal Managers' Financial Integrity Act (FMFIA)) requires the Comptroller General to issue standards for internal control in the federal government.

Praise for Auditor's Guide to Information Systems Auditing "Auditor's Guide to Information Systems Auditing is the most comprehensive book about auditing that I have ever seen. There is something in this book for everyone. New auditors will find this book to be their bible-reading it will enable them to learn what the role of auditors really is and will convey to them what they must know, understand, and look for when performing audits. For experiencedauditors, this book will serve as a reality check to determine whether they are examining the right issues and whether they are being sufficiently comprehensive in their focus. Richard Cascarino has done a superb job." —E. Eugene Schultz, PhD, CISSP, CISM Chief Technology Officer and Chief Information Security Officer, High Tower Software A step-by-step guide tosuccessful implementation and control of information systems More and more, auditors are being called upon to assess the risks and evaluate the controls over computer information systems in all types of organizations. However, many auditors are unfamiliar with the techniques they need to know to efficiently and effectively determine whether information systems are adequately protected. Auditor's Guide to Information Systems Auditing presents an easy, practical guide for auditors that can be applied to all computing environments. As networks and enterprise resource planning systems bring resources together, and as increasing privacy violations threaten more organization, information systems integrity becomes more important than ever. With a complimentary student'sversion of the IDEA Data Analysis Software CD, Auditor's Guide to Information Systems Auditing empowers auditors to effectively gauge the adequacy and effectiveness of information systems controls.

From financial reporting to revenue recognition to grants and contracts to auditor report changes, you have a lot going on in the not-for-profit financial arena right now. Whether you're already an expert in NFP audit and accounting standards or just getting started, this is the practical guidance you need. This must-have resource for nonprofits accounting and auditing professionals is an essential reference that will assist you with the unique aspects of accounting and financial statement preparation and auditing for not-for-profit entities. It will help you with the following Understand and implement recent updates and changes, including those related to financial reporting, revenue recognition, and grants and contracts Gain a full understanding of the accounting issues unique to not-for-profit entities Assist in the implementation of auditor report changes.

Designed to facilitate the use of audit data analytics (ADAs) in the financial statement audit, this title was developed by leading experts across the profession and academia. The guide defines audit data analytics as “the science and art of discovering and analyzing patterns, identifying anomalies, and extracting other useful information in data underlying or related to the subject matter of an audit through analysis, modeling, and visualization for planning or performing the audit.” Simply put, ADAs can be used to perform a variety of procedures to gather audit evidence. Each chapter focuses on an audit area and includes step-by-step guidance illustrating how ADAs can be used throughout the financial statement audit. Suggested considerations for assessing the reliability of data are also included in a separate appendix.

The value of the ASQ Certified Quality Auditor Handbook, Fifth Edition, is clear. It is designed to help new auditors gain an understanding of the field and prepare for the ASQ CQA exam. In addition, experienced auditors can refer to it as a helpful reference; audit managers and quality managers can rely on it for guiding their auditing programs; and trainers and educators can use it for teaching fundamentals. This in-depth overview of quality auditing represents auditing practices for internal and external applications. It provides practical guidance for both system and process auditors as well. Many current topics have been expanded to reflect changes in auditing practices since 2012, with guidance from the recent 2017 update of ISO 19011. In addition, readers will find example audit situations, stories, and review comments to enhance their understanding of the field. Topics covered include the common elements of all types of system and process audits (quality, environmental, safety, and health): Auditing fundamentals, including types of quality audits, purpose and scope of auditing, terms and definitions, roles and responsibilities of participants, and professional conduct The audit process, from preparation and planning, to performance and reporting, to follow-up and closure Auditor competencies, including resource management, conflict resolution, communication, interviewing, and team dynamics Audit program management and business applications, including staffing, training and development, program evaluation, organizational risk management, and best practices Quality tools and techniques, including problem-solving tools, process improvement techniques, basic statistics, verification, and validation "This book is an encyclopedia of all major bodies of information a new or experienced quality auditor would need. It covers both the qualitative and the quantitative, which is a strength. I can't think of a quality auditor that would not find this work helpful." Kim H. Pries, CRE, CQE, CSQE, CSSBB, CMQ/OE, CQA "This handbook will be helpful to those who are new to auditing or require more in-depth knowledge of the implementation of an audit program. Boxed examples or scenarios provide some of the practical challenges encountered during auditing." Govind Ramu, ASQ Fellow, Co-Author ASQ SSGB Handbook, Author ASQ CSSYB Handbook Lance B. Coleman, Sr. has over 25 years of leadership experience in the areas of quality engineering, Lean implementation, quality, and risk management in the Medical Device, Aerospace, and other regulated industries. He has presented, trained, and consulted throughout the United States and abroad. Lance is currently a Director of Quality for IDEX Health and Science, LLC, in Oak Harbor, Washington.