Big4Guy
Big4GuyWelcome to Big4Guy.com. Big4Guy is an online resource where I will share with you the latest news, insights, knowledge and some experiences as a Big 4 consultant. We will discuss some of the important issues which organisations are facing today in the areas of information security, security and controls in SAP R/3, Oracle Applications, J.D.Edwards, Peoplesoft and various other ERP's. You will also find information on latest complaince regulations like Sarbanes Oxley, Basel II and so on. Big4guy will also attempt to provide valuable resources for individuals interested in examinations the CISA, CISM, CISSP, PMP and various other security certifications considered essential for entry in any Big 4 accounting, auditing and consulting firms. You are invited to post your comments and viewpoints to posts here. I sincerely hope this online journal will be useful to everyone from a budding student to a professional in the accounting, auditing, management and consultancy professions.
|
Post details: SOX Documentation Principle - Audit Documentation Must Demonstrate Work Done
12/11/06
SOX Documentation Principle - Audit Documentation Must Demonstrate Work Done
One of the most important documentation principles of Sarbanes Oxley is that audit documentation must demonstrate that the work was done. Really, how does one demonstrate audit work done. Well, there are three guiding principles for audit work done. Auditor's documentation must have-
1. Procedures Performed
2. Evidence Obtained
3. Conclusions Reached
The above three guiding principles also appear in SAS 96 on Audit
Documentation. For a third person to understand the audit work performed, it is very important that the audit work has all three of the above attributes. Procedures performed lay down what exactly was attempted to be done by the auditors. The second principle stresses on the evidence that was obtained as part of the procedures. The third and final principle talks about the conclusions the auditor reached based on the procedures performed and evidence obtained. If the audit documentation meets the above three criteria, then one can reasonably presume that audit work is done.
Related Posts
7 Steps for Better SOX Compliance
Project Management for Sarbanes Oxley
Implementing ERM Enterprise Risk Management Framework
Comments:
No Comments for this post yet...
Categories
Archives
Search
| Mon | Tue | Wed | Thu | Fri | Sat | Sun |
|---|---|---|---|---|---|---|
| << < | > >> | |||||
| 1 | 2 | 3 | 4 | |||
| 5 | 6 | 7 | 8 | 9 | 10 | 11 |
| 12 | 13 | 14 | 15 | 16 | 17 | 18 |
| 19 | 20 | 21 | 22 | 23 | 24 | 25 |
| 26 | 27 | 28 | 29 | 30 | 31 | |
Misc
All content copyright © 2005-2008
Big4Guy.com
Do not reproduce either in part or full without the express permission of the
Webmaster
