Find Resources and Connect with members on topics that interest you.

Applications

Audit

Business Processes

Career Management

Cloud Computing/Virtualization

COBIT

Controls and Monitoring

Country

Databases

Fraud and Computer Crime

Governance and Management

Industry

Information Security

IT Service Management

Mobile/Wireless

Operating Systems

Privacy/Data Protection

Regulations

Risk

Standards

Access Control

Application Controls

Application Security

Audit Guidelines

Audit Standards

Audit Tools and Techniques

Basel

Big Data

Business Analytics/Intelligence

Business Continuity-Disaster Recovery Planning

Business Process Management

Career Management

Casinos and Gambling

CGEIT Exam Study Community 2013

Change Management

CISA Exam Study Community 2013

CISM Exam Study Community 2013

Cloud Computing

COBIT (4.1 and earlier) - Use it Effectively

COBIT (4.1 and earlier) Implementation

COBIT 5 - Implementation

COBIT 5 - Use It Effectively

Compliance

Computer Crime

Continuous Monitoring/Auditing

Controls Monitoring

CRISC Exam Study Community 2013

CyberSecurity

Enterprise Architecture

Enterprise Data Management

Financial Reporting Compliance

Forensics

Frameworks

Fraud

Governance of Enterprise IT

Green IT

Healthcare

HIPAA

HP Non-Stop (Tandem)

Identity Management

IFRS

Incident Management

India

Information Security Management

Information Security Policies/Procedures

Intrusion Prevention/Detection

ISAE 3402

ISO/IEC 20000

ISO/IEC 27000 Series

ISO/IEC 38500

ITIL

J-SOX

Mobile Computing

Network Security

Oracle

Oracle Database

Oracle E-Business Suite

OS/400

PCI DSS

PeopleSoft

Performance Measurement

Physical Security

Privacy/Data Protection

Project/Program/Portfolio Management (P3M)

Quality Standards

Risk Assessment

Risk Management

SAP

Sarbanes-Oxley (SOX)

Security Tools

Security Trends

Service Management

SharePoint

Solvency II

SQL Server

Strategic Planning/Alignment

Students

Unix-like

Value Delivery

Virtualization

Windows

Wireless

XBRL

Young Professionals

z/OS-OS/390

AI - Acquire and Implement

PO - Plan and Organize

DS - Deliver and Support

ME - Monitor and Evaluate

Application Controls

Process Controls

Please sign in to see your topics.

Subscribe to this discussion

Audit Report

I am developing an Information Technology Review Report template to be used by IT examiners evaluating the IT of financial institutions. I will appreciate any contribution. Thanks.
Posted by CHIBUEZE549 on April 23, 2011 09:49AM
You must sign in to rate content.
(Unrated)

Comments

RE: Audit Report

CHIBUEZE, what are you looking to communicate?  Our report is Word based, and it consist of a header section (very similar to a memo), executive summary, scope summary table that includes a rating score, distribution section, then we list the principal issues and if any, minor issues.  Is this what you're looking for?

Elliott Bujan
Field Supervisor, IT Audit
ElliottB at 6/1/2011 7:38:51 AM
You must sign in to rate content.
(Unrated)

RE: Audit Report

I use a matrix made in Excel. In a cell describe the finding and to the right the associated risk. Then assign a color (red, orange or yellow) according to the level of risk. This was based on the Risk Management Policy

In another cell I refer to the policy, procedure and / or industry standard that is associated finding. Then a cell so that the audited documents their views on this.

Bellow all this, in a merged cell that spans all of the above I include the appropriate recommendations.
emorro at 8/1/2011 10:02:02 AM
You must sign in to rate content.
(Unrated)

RE: Audit Report

I use a matrix made in Excel. In a cell describe the finding and to the right the associated risk. Then assign a color (red, orange or yellow) according to the level of risk. This was based on the Risk Management Policy

In another cell I refer to the policy, procedure and / or industry standard that is associated finding. Then a cell so that the audited documents their views on this.

Bellow all this, in a merged cell that spans all of the above I include the appropriate recommendations.
emorro at 8/1/2011 10:02:19 AM
You must sign in to rate content.
(Unrated)

RE: Audit Report

I use a matrix made in Excel. In a cell describe the finding and to the right the associated risk. Then assign a color (red, orange or yellow) according to the level of risk. This was based on the Risk Management Policy

In another cell I refer to the policy, procedure and / or industry standard that is associated finding. Then a cell so that the audited documents their views on this.

Bellow all this, in a merged cell that spans all of the above I include the appropriate recommendations.
emorro at 8/1/2011 10:02:19 AM
You must sign in to rate content.
(Unrated)

RE: Audit Report

I use a matrix made in Excel. In a cell describe the finding and to the right the associated risk. Then assign a color (red, orange or yellow) according to the level of risk. This was based on the Risk Management Policy

In another cell I refer to the policy, procedure and / or industry standard that is associated finding. Then a cell so that the audited documents their views on this.

Bellow all this, in a merged cell that spans all of the above I include the appropriate recommendations.
emorro at 8/1/2011 10:02:02 AM
You must sign in to rate content.
(Unrated)

RE: Audit Report

CHIBUEZE, what are you looking to communicate?  Our report is Word based, and it consist of a header section (very similar to a memo), executive summary, scope summary table that includes a rating score, distribution section, then we list the principal issues and if any, minor issues.  Is this what you're looking for?

Elliott Bujan
Field Supervisor, IT Audit
ElliottB at 6/1/2011 7:38:51 AM
You must sign in to rate content.
(Unrated)

RE: Audit Report

CHIBUEZE, what are you looking to communicate?  Our report is Word based, and it consist of a header section (very similar to a memo), executive summary, scope summary table that includes a rating score, distribution section, then we list the principal issues and if any, minor issues.  Is this what you're looking for?

Elliott Bujan
Field Supervisor, IT Audit
ElliottB at 6/1/2011 7:38:51 AM
You must sign in to rate content.
(Unrated)

RE: Audit Report

I use a matrix made in Excel. In a cell describe the finding and to the right the associated risk. Then assign a color (red, orange or yellow) according to the level of risk. This was based on the Risk Management Policy

In another cell I refer to the policy, procedure and / or industry standard that is associated finding. Then a cell so that the audited documents their views on this.

Bellow all this, in a merged cell that spans all of the above I include the appropriate recommendations.
emorro at 8/1/2011 10:02:02 AM
You must sign in to rate content.
(Unrated)

RE: Audit Report

I use a matrix made in Excel. In a cell describe the finding and to the right the associated risk. Then assign a color (red, orange or yellow) according to the level of risk. This was based on the Risk Management Policy

In another cell I refer to the policy, procedure and / or industry standard that is associated finding. Then a cell so that the audited documents their views on this.

Bellow all this, in a merged cell that spans all of the above I include the appropriate recommendations.
emorro at 8/1/2011 10:02:19 AM
You must sign in to rate content.
(Unrated)

Leave a Comment

* required

You must login to leave a comment.

« Return to All Discussions « Return to Topic