What is the quality of the procedures documentation? __High Support: __Acceptable __Unacceptable a. Are audit trails sufficient? __Yes Why not: __No How well does the audit describe the risk represented in __Well Support: individual findings or groups of findings? __Acceptable __Unacceptable __NA If the area or unit is internally rated satisfactory, how well __Well Support: does the audit mitigate the existence of significant __Acceptable findings? __Unacceptable __NA Were all exceptions or weaknesses in the audit work __Yes Why not: papers noted in the final audit report? __No __NA Were the internal auditors (in-house or outsourced), How determined: __Yes including third parties, adequately qualified to complete this program? __No How well does the auditor in charge support the final __Well Support: audit rating? __Acceptable __Unacceptable __NA Do you agree with the final rating? __Yes Why not: __No __NA Were any horizontal or silo emerging or systemic risks __Yes Explain: identified during the audit review? Should there have __No been? __Yes Why not: If yes, was the information appropriately addressed, __No discussed, and reported in a reasonable time frame to the fullest extent possible across the enterprise? If automated testing or continuous auditing was used, __Yes Explain: was its use independent, appropriate, and effective? __No Sampling Did the auditor use statistical sampling? __Yes __No __NA Was the population accurately defined and justified __Yes Why not: by the auditor? __No __Yes Why not: Was the selection of the sampling method disclosed? __No Were the sample selection techniques disclosed? __Yes Why not: Were sample evaluation and reporting results criteria __No established? __Yes Why not: __No
What is the quality of the procedures documentation? a. Are audit trails sufficient? __High __Acceptable __Unacceptable Support: __Yes __No Why not: How well does the audit describe the risk represented in individual findings or groups of findings? __Well __Acceptable __Unacceptable __NA Support: If the area or unit is internally rated satisfactory, how well does the audit mitigate the existence of significant findings? __Well __Acceptable __Unacceptable __NA Support: Were all exceptions or weaknesses in the audit work papers noted in the final audit report? __Yes __No __NA Why not: Were the internal auditors (in-house or outsourced), including third parties, adequately qualified to complete this program? __Yes __No How determined: How well does the auditor in charge support the final audit rating? __Well __Acceptable __Unacceptable __NA Support: Do you agree with the final rating? __Yes __No __NA Why not: Were any horizontal or silo emerging or systemic risks identified during the audit review? Should there have been? If yes, was the information appropriately addressed, discussed, and reported in a reasonable time frame to the fullest extent possible across the enterprise? __Yes __No Explain: __Yes __No Why not: If automated testing or continuous auditing was used, was its use independent, appropriate, and effective? __Yes __No Explain: Sampling Did the auditor use statistical sampling? Was the population accurately defined and justified by the auditor? Was the selection of the sampling method disclosed? Were the sample selection techniques disclosed? Were sample evaluation and reporting results criteria established? __Yes __No __NA __Yes __No Why not: __Yes __No Why not: __Yes __No Why not: __Yes __No Why not:
pub-ch-internal-external-audits-appendix-e-ws.docx