This was my first attempt at identifying risk to support the development of the annual risk-based audit plan (RBAP). I have been involved in the development of the RBAP – even responsible for it – over the years and always felt that it was more professional opinion than anything else. Some people built a spreadsheet with weighting factors 1-5 and fooled themselves into believing that there is a logic and…
Wow – never realized how much work this would be. I mean, I am only posting once a week – but it still takes a lot of time. Not getting many comment, but I hope people are enjoying and learning from the posts. I had hoped more people would share their experiences so we could learn from each other. I was now interested in expanding my use of data analytics…
Even now, I firmly believe that the potential for the Y2K disaster was real. The only reason that its effects were minimized was a result of the hundreds of thousands of hours spent checking and rechecking programming code to address the “00” year problem before it occurred. For those of you too young to remember, prior to the year 2000, many databases and applications only used two digits for the…
I had been writing articles for the Internal Auditor (IIA) and other audit-related magazines for several years now, but I wanted to do more to educate and encourage auditors in the use of analytics. One day I realized that if I assembled all of my previously published IIA articles, I had about 50% of the content necessary for a book on analytics. So I started developing an outline and writing…
Our analytics team was running on all cylinders and achieving significant results. There was not just my opinion, we received an ISACA Award of Excellence at the Info Tech Audit ’95 conference for leadership and contribution to IT Audit Community. Amazingly, it was a $1,000 cash award. The team (3 people) went for out for a celebratory dinner and donated the remaining funds to a local charity. By how we…
Having been a member of the IIA since 1990, I always looked forward to the Internal Auditor magazine. However, it rarely included articles on computer-assisted audit tools and techniques (CAATTs). I wrote the first of several articles on data analytics “Computer-Assisted Audit Tools and Techniques: The Power of CAATT is turning up the ‘can-do’ potential of some audit shops”. It was published in February 1993 and, to my knowledge, was…