Blake D. Koen

I agree that all auditors have their undesirable traits. No one will have everything that you want. I would have to say that the faker is the worst. If you know more about controls and less about regulations, you should have the integrity to say that you don’t know HIPPA or PCI regulations and let someone else deal with those audits. Not being…[Read more]

On audit interaction- I think that one of the hardest things about being an auditor is getting people to trust you. People often think of auditors as the bad guys who are only there to get the employees in trouble or even fired. Reality is that is not the case. Auditors are there to help ensure that policies and controls are being followed, so…[Read more]

Good article. I hadn’t thought much of how to handle what you found once you’ve completed your risk assessment. The article does a good job mentioning that you can’t spread fear in the organization about a threat or doubt that the organization can handle it. You don’t want to scare people into making a decision quickly, as making a decision under…[Read more]

I agree, the companies can only do so much. The customer in this case should have been suspicious , especially of that second email.

I often wonder how many people fall victim to these scams. I know that they only need a small percentage to for these to work, but then I log onto to social media and see my friends posting some stupid thing saying that they don’t give facebook the right to steal their photos or something, and they believe they are protecting their account. Then…[Read more]

Over the past 3 weeks we have talked a lot about segregation of duties. While we all knew that this is an important control to prevent fraud, we learned more about which job functions need to be separated. For example, we now know that people in sales should not be receiving customer payments. We also know that there should be a SOD in the…[Read more]

Over the last two weeks, I learned how to make journal entries in SAP, as well as other business controls that can be put in place to prevent fraud. In addition, I also learned about how the roles in SAP can prevent fraud. When the user attempts to do something (like create or edit a transaction), the system checks the users key chain to ensure…[Read more]

Hi,

Are the videos not working for anyone else? I can’t get them to play.

Blake

Reading observations:
Auditor’s Guide to IT Auditing, Cascarino Chapter 16

In addition to the planning and development that is talked about above, there are controls that the organization can enact to protect themselves. Segregation of duties is one thing- this prevents one person from having too much power and reduces the risk that fraud a…[Read more]