Big4GuyWelcome to Big4Guy.com. Big4Guy is an online resource where I will share with you the latest news, insights, knowledge and some experiences as a Big 4 consultant. We will discuss some of the important issues which organisations are facing today in the areas of information security, security and controls in SAP R/3, Oracle Applications, J.D.Edwards, Peoplesoft and various other ERP's. You will also find information on latest complaince regulations like Sarbanes Oxley, Basel II and so on. Big4guy will also attempt to provide valuable resources for individuals interested in examinations the CISA, CISM, CISSP, PMP and various other security certifications considered essential for entry in any Big 4 accounting, auditing and consulting firms. You are invited to post your comments and viewpoints to posts here. I sincerely hope this online journal will be useful to everyone from a budding student to a professional in the accounting, auditing, management and consultancy professions.
|
Over the past few months, I have been trying to throw more light on the overall Sarbanes Oxley compliance process. Today, I am talking from the point of view of the auditor attesting a company's financial statements. What protocol should the auditor follow in case of a scope limitation in a sarbanes oxley engagement. Due to circumstances,
an auditor may face restictions in scope, in which case he has the following options:
1. Withdraw from the Enagegement
2. Disclaim an opinion
3. Express a qualified opinion
The auditor in deciding which course of action to take should assess the importance of the ommitted to his ability to form an opinion on management's assessment of internal control. The auditor should also bear in mind his opinion on the effectiveness of company's internal control over financial reporting while deciding the appropriate action in scope limitation cases.
From my personal experience, I know that scope limitation cases occur very rarely. But in case as an auditor you do find limitations imposed by management, my advise would be to withdraw from the engagement or
disclaim his opinion. I would also recommend a through reading of Auditing Standard 2 for auditors faced with scope limitations in Sarbanes Oxley audits. Watch out this space for more on SOX audit scope limitations!
Related Posts
Using the Work of Others in SOX Audits
SOX Application and Data Owners
Multi-Disciplinary Audit Teams for SOX Audit
Application Level Controls
No Comments for this post yet...
MySQL error! You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''sarbanes_oxley_audit_scope_' at line 7(Errno=1064) Your query:SELECT DISTINCT ID, post_author, post_issue_date, post_mod_date,
post_status, post_locale, post_content, post_title,
post_urltitle, post_url, post_category,
post_autobr, post_flags, post_wordcount, post_comments,
post_renderers, post_karma
FROM (evo_posts INNER JOIN evo_postcats ON ID = postcat_post_ID)
INNER JOIN evo_categories ON postcat_cat_ID = cat_ID WHERE cat_blog_ID = 5 AND post_urltitle = 'sarbanes_oxley_audit_scope_