Suchergebnisse

• eJournal-Artikel aus "Zeitschrift Interne Revision" Ausgabe 2/2020

  Die Erhebungsmethode des Control Self Assessment (CSA)

  Ein ergänzendes Werkzeug der IT-Revision
  

  Dieter Paschke

  …Social Media geprägt. Die Informationstechnologie (IT) wird in den kommenden Jahren deutlich an Bedeutung gewinnen, und die Integration der… …aktuelle und zukünftige Veränderungen gut aufgestellt zu sein. Eine Konsequenz der digitalen Transformation aus Sicht der IT- Revision ist die steigende… …Verwendung einer gemeinsamen Sprache die Kommunikation zwischen den geprüften und den prüfenden Bereichen verbessert werden und der Beratungsgedanke der IT… …Self Assessment, S. 10. 02.20 ZIR 77 BEST PRACTICE Control Self Assessment Self-assessment IT Division / Unit / etc. Audit No.: XXXXXX Page 8 /16 Nr… …. Audit Area yes / no Response / Comment Audit comment 3 IT Operations 3.1 Do you use a ticket system to document and process service requests, incidents… …projektbegleitenden Qualitätssicherungen; Unterstützung bei Fragestellungen zu IT-Risiko-management, IT- Qualitätsmanagement, IT-Sicherheits-services und… …Prüfungs- und Beratungsansatzes an. IT REVIEW GmbH Wirtschaftsprüfungsgesellschaft Peter-Klöckner-Straße 5 D-56073 Koblenz Tel.: 49 261 30 457 63-0 Fax +49… …Digitalisierung und die damit steigende Komplexität der eingesetzten IT- Architekturen eine neue Herangehensweise an die Methodik und Prüfungsplanung erfordert. Die… …sich die IT-Landschaft einer Firma fortlaufend verändert (Einführung, Veränderungen, Außerbetriebnahme). Folglich ändert sich auch das Risiko der IT und… …IT- Revision wesentlich erweitert wird. 7. Fazit CSA ist eine ergänzende Methodik, welche Schwachstellen im Internen Kontrollsystem aufdecken kann. Mit…

  Alle Treffer im Inhalt anzeigen
• eBook-Kapitel aus dem Buch Accounting Fraud

  Case 25: Bernard Madoff (2008)

  Prof. Dr. Klaus Henselmann, Dr. Stefan Hofmann

  …understanding, as was the case with the U.S. subprime mortgage crisis. It was the result of one of the simplest and one of the oldest embezzling schemes: a… …stunning fraud that appears to be of epic proportions”, and the Economist called it “the con of the century”. Needless to say, the unprecedented scope of… …older ones. The scheme lasted six months before it was uncovered. Today, the conception of such a scheme seems almost incomprehensible. Besides its… …returns. The SEC admitted that it had missed “repeated opportunities” to discover the fraud. It had received “credible and specific allegations regarding… …red flags was so long and unsettling that it should have raised serious concerns with regulators and potential investors (see Gregoriou/Lhabitant 2008… …Madoff’s purported track record was so good and so consistent that it should have been suspect. Based on mathematical probabilities, the average returns… …niece Shana served as the in-house legal council (it might be noteworthy that she was married to a lawyer who had served at the SEC and had repeatedly… …supervised inquiries about Bernard Madoff’s securities operations). In general, this heavy family influence should have been questioned, as it was an… …162 tions and required advisors to count each final investor as a client, Madoff still did not register. It was only after an SEC investigation that… …largest hedge fund is a fraud”. This time, the SEC followed up on his tips and investigated BMIS. But it found no evidence of a Ponzi scheme, just a few…

  Alle Treffer im Inhalt anzeigen
• eBook-Kapitel aus dem Buch IT-Unterstützung für Interne Revision und Wirtschaftsprüfung

  Voraussetzungen für optimalen – systematischen – IT-Einsatz

  Dr. Heinrich Schmelter

  …Einsatz der IT in der IR müssen folgende Voraussetzungen bereitgestellt und organisiert werden: – Hardware – Software – Zugang zu Unternehmensdaten… …Fachbereichen und insb. der jeweiligen IT- Abteilung notwendig. Die IR benötigt einen regelmäßigen, systematischen Zugang zu den wichtigsten Unternehmensdaten… …direkten Zugang zu diesen Systemen ggf. mit Spezial- software besitzen. Damit für diese Daten auch innerhalb der Revision die – in der IT selbstredende… …. Voraussetzungen für optimalen – systematischen – IT-Einsatz 145 6 IT-Kenntnisse und -Erfahrung Der effiziente und effektive Einsatz der IT in IR und WP setzt… …. Rechnungswesen und Finanzierung – C. Kosten-/Leistungsrechnung – D. Gesetzgebung und Wirtschaft – E. Informationstechnologie Zu den Details verweist das… …DIIR auf die vom IIA53 dazu ausgewiesenen folgenden IT-Anforderungen: – Information Technology – IT – Control frameworks (e.g., COBIT) – Data… …(EDI) – Functional areas of IT operations (e.g., data center operations) – Encryption – Information protection (e.g. viruses, privacy) – Evaluate… …investment in IT (cost of ownership) – Enterprise-wide resource planning (ERP) software (e.g., SAP R/3) – Operating Systems – Application Development –… …Darstellung der IT-Anwendungsvoraussetzungen bereits mehrfach erkennbar, benötigt die IT in der IR auch eine angemessene Organisation. Es sollte vermieden… …die meisten WP-Gesellschaften über spezielle IT- bzw. EDV- Revisionen mit hinsichtlich IT speziell ausgebildeten Mitarbeitern. Weil die Prüfer sich i…

  Alle Treffer im Inhalt anzeigen
• eBook-Kapitel aus dem Buch Accounting Fraud

  Types of Fraud

  Prof. Dr. Klaus Henselmann, Dr. Stefan Hofmann

  …, managers, and employees of organizations, ranging from petty thefts to sophisticated financial statement frauds. It is illustrated in Exhibit 3 (see Wells… …three major categories, there are several sub-categories of fraud scheme types. It should be noted, however, that a number of cases described in… …misappropriation, or both accounting fraud and corruption. In these cases where there are multiple schemes, it is impossible to subdivide the losses in order to… …show exactly how much of the loss was attributable to each of the component schemes. As a consequence, it is necessary to address each of the three… …the property, but has “misappropriated” it. Asset misappropriation is the most common of the three primary categories of occupational fraud… …Skimming Cash is stolen from an organization before it is recorded on the organization’s books and records - Employee collects payment from a customer… …but does not record the sale Cash larceny Cash is stolen from an organization after it is recorded on the organization’s books and records -… …steals outgoing check to a vendor and deposits it into his own bank account Register disbursements An employee makes false entries on a cash… …sub-categories are very similar in nature, and it is important to understand the differences that exist among these categories. Sub-category Description… …, rather than to influence it - Purchasing agent is lavished with an expensive vacation or other items when a vendor’s contract is approved Economic…

  Alle Treffer im Inhalt anzeigen
• eBook

  Prüfungsleitfaden BAIT

  Sicherer IT-Einsatz in Kredit- und Finanzdienstleistungsinstituten
  

  978-3-503-20927-9

  Dipl.-Bw. (FH) Axel Becker, DIIR - Deutsches Institut für Interne Revision e. V.

  …Finanzwirtschaft ist aufgefordert, höhere Sicherheitslevel umzusetzen. Was dabei genau erwartet wird, konkretisieren die Bankaufsichtlichen Anforderungen an die IT…
• eJournal-Artikel aus "Zeitschrift Interne Revision" Ausgabe 2/2013

  Cloud Computing unter CoBiT

  Dipl.-Wirt.inform. (FH) Stefan Tönnissen

  …Kernkompetenz zu konzentrieren und die IT auszulagern 1 . Die Nutzung und Verbreitung von Cloud Computing in den Unternehmen erfährt eine stetige Zunahme. Neben… …berücksichtigen. Dieser Beitrag zeigt auf, welche Möglichkeiten zur Prüfung von IT- Governance und Compliance mit dem internationalen Prüfungsstandard CoBiT… …wird in der aktuellen Literatur sehr unterschiedlich ausgelegt. Das IT Governance Institute (ITGI) sieht das Hauptziel von IT-Governance im Verständnis… …der Anforderungen an die IT sowie darin, die strategische Bedeutung von IT zu verstehen, um die optimale Erreichung der Unternehmensziele… …sicherzustellen und Strategien für die zukünftige Erweiterung des Geschäftsbetriebes zu schaffen 5 . „IT Governance zielt darauf ab, dass Erwartungen an die IT… …, Kontrolle und Überwachung der Informationstechnologie in einer Unternehmung 7 . Dieser eher prüfungsorientierte Ansatz wird erwartungsgemäß auch von der… …Wirtschaftsprüfungsgesellschaft PriceWaterhouseCoopers (PWC) verwendet. PWC definiert IT-Governance als Organisation, Steuerung und Kontrolle der IT eines Unternehmens zur Abb. 1… …. 5 Vgl. IT Governance Institute: IT Governance für Geschäftsführer und Vorstände, Rolling Meadows 2003, Seite 8. 6 Vgl. IT Governance Institute: a. a… …. O., Seite 8. 7 Vgl. Heschl, J.; Middelhoff, D.: IT Governance, Books on Demand, Norderstedt, 2005, Seite 16. Cloud Computing unter CoBiT Arbeitshilfen… …: „IT governance is the responsibility of executives and the board of directors, and consists of the leadership, organizational structures and processes…

  Alle Treffer im Inhalt anzeigen
• eBook-Kapitel aus dem Buch Accounting Fraud

  Case 42: Nikko Cordial (Japan, 2007)

  Prof. Dr. Klaus Henselmann, Dr. Stefan Hofmann

  …third-largest stockbroker- age group. As one of the nation’s leading securities houses, it should have been set- ting a good example on corporate disclosure for… …supervised status as it investigated whether the violations met the criteria for delisting. In the weeks to come, the share price plunged on speculation that… …gave the go-ahead to falsify the issuance date. Nikko Cordial behaved the way most Japanese firms do when misdeeds come to light: it promptly… …financial state- ments to the TSE, and in March the TSE announced its decision, which surprised most market participants. It decided not to delist Nikko…

  Alle Treffer im Inhalt anzeigen
• eBook-Kapitel aus dem Buch Global Management Challenges for Internal Auditors

  Governance Works, in Principle

  Neil Baker

  …Washington in November to discuss the impact of the credit crunch, they made it clear that financial firms will face much tougher regulation in future. “We… …practice of it… The focus should be on whether the existing standards have been observed in practice.” The Code, for example, says that a company’s board… …aged.” It goes on to say that non-executive directors “should satisfy themselves on Baker 54 the integrity of financial information and that… …that doesn’t mean the principles are wrong, Boyle argued. If it is the practice, rather than the code, of corporate governance that is at fault… …training. And they suggested some quick fixes, such as holding informal meetings outside the confines of the traditional boardroom – to make it easier for… …responsibility burden of the typi- cal non-executive. No wonder companies say it is becoming more difficult to find good candidates – a problem that the current… …senior managers and directors.” It argued that over the last decade, the proportion of the board composed of hands-on, executive directors had declined… …commitment to open such dialogue,” it said. The financial firms that had the best control over their balance sheet growth and liquidity needs were those that… …: crowding out personal responsibility. “It is not help- ing us, it makes things worse,” he argued. “What compliance is doing is making sure people follow… …rules. We forget about our own responsibility for our behaviour and replace it with responsibility for compliance.” What are the implications for…

  Alle Treffer im Inhalt anzeigen
• eBook-Kapitel aus dem Buch Auditing Payroll

  Forms of Remuneration

  DIIR – Deutsches Institut für Interne Revision e. V.

  …33 5 Forms of Remuneration Compensation is the remuneration received by employees in exchange for their contractual services. It includes base… …though health insurance should cover it. Sick leave may be paid without a medical cer- tificate and/or justification. What steps are taken to ensure… …, calculation and budgetary expenditures. 5 Stock-purchase plan Misuse of benefits • Check whether an agreement/ regulation exists and whether it is paid… …is essen- tially a matter of ensuring the return of company property (e. g., clothing, IT equipment, telephone, etc.), keys or badges. Departing… …employees must en- sure that they will delete any non-official data. This is associated with the withdrawal of authorizations on IT systems. Possible… …, it cannot avoid a substantial short-term loss of work with a concomitant loss of wages. The affected workers then receive correspondingly lower wages… …between employer and em- ployee. In particular, it does not terminate the reduction in hours previously Reduced Working Hours 43 agreed upon. The…

  Alle Treffer im Inhalt anzeigen
• eBook-Kapitel aus dem Buch Accounting Fraud

  Case 10: MicroStrategy (2000)

  Prof. Dr. Klaus Henselmann, Dr. Stefan Hofmann

  …previous year), and that its earnings rose to 29 cents per share (from 16 cents in 1998). A few days later, it was the host of a Super Bowl party with… …share (more than 80 times its price when it went public in June 1998). At the time, 34-year-old Michael Saylor was one of the most famous entrepreneurs… …it would restate its financial results for the fiscal years 1997, 1998 and 1999. The restatement reduced revenues over the three-year period by USD… …66 million, nearly one-fifth of the total USD 365 Accounting Fraud in U.S. Companies 72 million reported. It also wiped out USD 56 million in… …billion in market value. Nevertheless, the share price continued to drop in the following weeks. The once USD 333 stock did not bottom out until it… …reached USD 33 on April 13, 2001. Following the meltdown, the SEC launched an investigation into MicroStrategy’s accounting practices. It turned out… …it were separate from the service obligations, thus improperly recognizing material amounts of revenue prematurely. In other transactions, the… …, once again, MicroStrategy recognized revenue before it should have been recognized. It booked revenue from any ele- ments of these deals upfront… …in U.S. Companies 73 Eventually, MicroStrategy engaged in several unusual transactions in which it essentially swapped millions of dollars… …them is a home run,” said MicroStrategy lawyer Ralph Ferrara of Debevoise & Plimpton. “It was a tough case to bring to conclusion.” Indeed, the SEC…

  Alle Treffer im Inhalt anzeigen