acl user conference
DESCRIPTION
ACL User Conference. New York City June 8 th , 2009. The Road to Continuous Assurance by Jason Gross. Control Management versus Internal Audit No longer independent Actively participates in the business decisions Become more of the event driver towards continuous monitoring. - PowerPoint PPT PresentationTRANSCRIPT
ACL User ConferenceACL User ConferenceNew York CityJune 8th, 2009
New York: Monday, June 8
7:30 a.m. - 8:30 a.m. Breakfast | Registration | Networking
8:30 a.m. - 8:45 a.m. Welcome and Opening Remarks
8:45 a.m. - 9:45 a.m. The Road to Continuous Assurance: A Team's Transition from Audit to Continuous Controls Monitoring
Jason A. Gross, CPA, CIA, CFE, CISA, ACDAVice President Controls Management
Siemens Financial Services 9:45 a.m. - 10:15 a.m. Break | Networking
10:15 a.m. - 11:15 a.m. Gaining Audit Assurance: Continuous Audit Techniques with ACL
David Toussas, CISA, Director IT AuditTiffany & Co.
11:15 a.m. - 12:30 p.m. ACL Impact Award Winner
12:30 p.m. - 1:30 p.m. Lunch | Roundtables | Networking
1:30 p.m. - 3:30 p.m. Workshop: Advanced Techniques to Improve Audit Efficiency
Michael Keiffer, CPA, CIA, CISA, CTA, ACDAACL Certified Master Trainer
Workshop: Continuous Auditing & Monitoring with ACL
Dustin Lewis, CISA, ACDASenior Technology Consultant, ACL
Services Ltd.
3:30 p.m. - 4:00 p.m. Break | Networking
4:00 p.m. - 5:00 p.m. ACL Use it or Lose It: Benchmarking Workshop Facilitated by Steve Biskie, CPA, CITP, CISABest Practices Director, ACL Services Ltd.
5:00 p.m. - 7:00 p.m. Cocktail Reception
The Road to Continuous The Road to Continuous Assurance by Jason GrossAssurance by Jason Gross
Control Management versus Internal Audit◦No longer independent◦Actively participates in the business
decisions◦Become more of the event driver
towards continuous monitoring
In Order To Succeed…In Order To Succeed…
Obtain support & commitment from Audit Committee and Management
Continuous Auditing should complement the Audit Plan
Start small; build from successAutomate/leverage from well-
defined periodic auditsGain reliance by external auditors
and add value
Technology Tools…Technology Tools…Optimize current data analytic
scripts and schedule routines on a ‘continual’ basis’
Obtain direct access to the dataCultivate core team of skilled
auditors using technology for data extraction and analysis
ContinuousContinuous AuditAudit Techniques with Techniques with ACL by David ToussasACL by David ToussasNo little blue box under our
chairsInteresting overview of the
history of the companyThe evolution of using ACL in
their businessOvercoming the
challenges/access to dataGet buy-in
Evolution of ACL at TiffanyEvolution of ACL at Tiffany2001: Created A/P Testing Module in
ACL2003: Initial Attempt at Continuous
Audit2003: Identified Issue in Production
Report2004: Utilized U.S. Sales Data
Warehouse2005: Enhanced Post Void Testing2005: Travel & Entertainment (cash
advances)
Challenges they facedChallenges they facedStaffing
◦Turnover in the SOX-Era has been challenging
◦Limited resources with technical skillsSustainability
◦Data exists on various platforms and databases
◦Majority of time spent developing/running queries
◦Staff is uncomfortable downloading/importing
What they did about itWhat they did about itNew Goals
◦Centralized repository for data gathering◦Consistently refresh data◦Ability to control changes to ACL Modules◦Expand Continuous Audit into
International Retail◦Identify additional projects
Implement◦Upgrade ACL Server to ACL
AuditExchange
Impact Award WinnersImpact Award WinnersManuel Coello - Stanley Works
◦North American Winner◦Continuous Monitoring using ACL and
their successes
David T. Miod - United States Air force◦Overall winner◦Cost reductions in the millions if not
billion+
Manuel Coello - Stanley Works
Smorgageboard of ACL Smorgageboard of ACL UsesUsesTravel Improvement EventContracts Improvement EventGPC Improvement EventSupply Improvement EventAVPOL Improvement EventReimbursements Improvement
Event
All with dollar savings in the millions
Continuous Auditing and Continuous Auditing and AssuranceAssuranceBy Dustin Lewis – ACLDo ad hoc first then automateEarly wins/high risk areasAnalytic Essentials (for Audit Exchange
Only)Run VerifyComment tricks
◦ End of blank line ends commentsMaking font bigger (or smaller)Example of cleaning up filesAll commands in upper caseUse of permanent variables (_status)Set Debug?
Benchmarking WorkshopBenchmarking WorkshopUse it or lose itUse it or lose itMust not have been too eventful for meEach table had ½ hour to come up with
ACL application ideas that was unique½ hour to share our ideasMine was duplicate reporting – first
thing facilitator said was no dup reporting ideas since everyone has one.
Our table wasn’t pickedLast item on the agenda before cocktail
hour