This Self-Assessment Questionnaire (SAQ) is a tool to be used by an agency to: Develop fiscal and administrative controls. Evaluate the adequacy of existing procedures, both as written and actually performed. Ensure that written procedures and actual practices are the same. Each agency should review its procedures at least biennially to ensure compliance with the minimal internal control standards as set forth in this SAQ. By completing the SAQ, an agency can identify potential internal weaknesses. The SAQ is designed so that a response indicates an area of concern, which may require “No” corrective action in written procedures and/or actual practices, such as: Developing new or revised procedures to correct the deficiency found; or Implementing a compensating control. The Comments/Issues column should be used for agency’s notes. SAQs should be reviewed and approved by management and the original maintained in the agency’s files for audit purposes. This document is to be used to help complete the agency’s Biennial Report on Internal Controls, which is due by July 1 of each even-numbered year. Thank you for your cooperation. J. Electronic Data Processing (Non-IFS) Yes No N/A Comments/Issues Does your agency use any computerized accounting systems that directly interface with Advantage? Note: If the answer to this question is this section is N/A to “no”, your agency. Are there policies and procedures regarding EDP security responsibilities? Do the computerized accounting systems require the same degree of controls (similar to those for Advantage) for authorization, input, approval, and reconciliation of transactions? Do appropriate controls to: Prevent unauthorized access, improper changes, or data loss to fiscal applications or programs (passwords)? Segregate incompatible functions (system parameter restrictions)?
This Self-Assessment Questionnaire (SAQ) is a tool to be used by an agency to: Develop fiscal and administrative controls. Evaluate the adequacy of existing procedures, both as written and actually performed. Ensure that written procedures and actual practices are the same. Each agency should review its procedures at least biennially to ensure compliance with the minimal internal control standards as set forth in this SAQ. By completing the SAQ, an agency can identify potential internal weaknesses. The SAQ is designed so that a “No” response indicates an area of concern, which may require corrective action in written procedures and/or actual practices, such as: Developing new or revised procedures to correct the deficiency found; or Implementing a compensating control. The Comments/Issues column should be used for agency’s notes. SAQs should be reviewed and approved by management and the original maintained in the agency’s files for audit purposes. This document is to be used to help complete the agency’s Biennial Report on Internal Controls, which is due by July 1 of each even-numbered year. Thank you for your cooperation. J. Electronic Data Processing (Non-IFS) Yes No N/A Comments/Issues Does your agency use any computerized accounting systems that directly interface with Advantage? Note: If the answer to this question is “no”, this section is N/A to your agency. Are there policies and procedures regarding EDP security responsibilities? Do the computerized accounting systems require the same degree of controls (similar to those for Advantage) for authorization, input, approval, and reconciliation of transactions? Do appropriate controls to: Prevent unauthorized access, improper changes, or data loss to fiscal applications or programs (passwords)? Segregate incompatible functions (system parameter restrictions)?
J._EDP_SAQ.docx