Audit Technology

What is Continuous Monitoring?

Is the information you receive from your systems accurate and reliable?

Due to the sheer volume and complexity of business transactions today, traditional testing of controls, performed on a retrospective and cyclical basis, often months after business activities have occurred, is no longer adequate. Stricter compliance standards demand a process that automatically performs control and risk assessments on a more frequent basis. This is especially true during times of economic uncertainly when the risks of fraud and error increase.

Continuous Monitoring can allow the business owner to regularly monitor the effectiveness of controls and stay on top of any failures.

What is Continuous Monitoring?

Continuous Monitoring is nothing new, as a concept it has been around for a number of years and means different things to different people. It can be summed up as; a process that facilitates an in-depth, on-going review and analysis of financial information on a real time basis. The underlying premise is that auditors are able to analyse systems continuously performing control and risk assessments, this does not have to be in real-time but at a frequency appropriate for the activity being monitored. For example, a duplicated payment control can be monitored weekly just before the weekly payment run, a segregation of duties control can be monitored hourly.

“Using traditional audit techniques it takes an average of 342 days to detect a fraud, at which point 89% of all proceeds are unrecoverable.”

KPMG Forensics Fraud Survey 2008

The Need for Continuous Monitoring

With increased regulatory requirements including Sarbanes Oxley section 404 reporting requirements, the Turnbull guidance and the new tax penalty regime from HM Revenue and Customs, all employees have some responsibility for internal controls. They, collectively, should have the necessary knowledge, skills, information, and authority to establish, operate and monitor the system of internal control. Traditional fixed point Monitoring does not provide sufficient information in a timely manner to enable employees to take this responsibility. Effective monitoring on a continuous basis is therefore an essential component of a sound system of internal control.

Continuous Monitoring Solution

CaseWare Monitor is our continuous monitoring software solution that provides security, reliability, flexibility and early detection to prevent fraud, enhance efficiency and improve compliance.

Most continuous monitoring solutions are application based and only support specific business processes, CaseWare Monitor can be applied to any business process, regardless of the underlying system or platform.

For more information on continuous monitoring please visit our website.

Standard
Audit Technology

Computer Aided Audit Technology and why it triumphs Excel.

Many continue to use spreadsheet tools as their ‘default’ approach for data analysis for a few main reasons. Obviously the software has high availability, with the majority of businesses use Microsoft™ as their operating system whist Microsoft Excel® is the most recognised spreadsheet tool in the market for data entry.

It becomes a habit. Spreadsheet tools are familiar, comfortable and many (instinctively) attempt to use a spreadsheet tool to fulfil data analysis objectives. There is a lack of CAAT awareness/knowledge, with many unaware that specialist data analysis tools exist! Not willing to invest in data analytic software. Adopting a CAAT approach is a relatively inexpensive option. However, there will always be an appeal to continue using spreadsheet tools for data analysis as it is a free approach requiring no further investment.

What many don’t know is all the limitations of using spreadsheet tools for data analysis, over CAAT technology. Firstly the volume. For perspective, Microsoft Excel 2003 is limited to 65,536 rows of data or in Microsoft Excel 2007 the record limit is 1,048,576 rows. Interactive Data Extraction and Analysis (IDEA) can analyse 2.1 billion rows of data per an unlimited number of sheets. Spreadsheets offer little-to no data integrity. The data can be manipulated with any accidental or deliberate strikes to the keyboard, losing valuable time and effort in your analysis. In comparison, core data cannot be changed once imported into IDEA.

Spreadsheet tools do not record tests performed on the data set, nor contain a log feature which shows documented proof to accompany the audit plan. IDEA automatically creates a history log which is a complete audit trail of the tests performed (and who performed it). The history trail cannot be deleted. Spreadsheet tools are not audit tools and have been designed and developed for data input and reporting only. As an independent, purpose-built data analysis tool, IDEA has most of the commonly used audit tests available as ‘one button’ click options.

Data viewed on the screen is usually a spreadsheets interpretation of the imported data. A good example is how a spreadsheet tool interprets a date field: A date downloaded from the host system held as 08/12/01 may display as 08-Dec-2001. This on its own may not seem important but Excel (for example) will hold this date as a number of days since 1st Jan 1900. If the spreadsheet was then saved and an attempt was made to view the source data the date would have changed to a number.

IDEA software is the market leading Computer Assisted Audit Tool/Technique (CAAT) which has been designed to help any user analyse, manipulate and interrogate huge quantities of data held from any business platform/system. IDEA does not rely on business intelligence and therefore no data interpretations are made whatsoever. What you see is a true snapshot of the imported data ready for analysis. Not only that but IDEA is the most user-friendly and cost-effective tool available, making it an easy transaction from your existing spreadsheet auditing tool.

IDEA Software

For more information please get in contact with us and visit our website, www.auditware.co.uk

Standard