Tiesha Christian

Wenlin Zhou – I like your points about offereing to help whenever possible. Becoming a subject matter expert and remaining eager to learn. People do love to witness such behavior, especially in the audit industry. Having great work ethic gets you great visibility in front of management as well as clients. It may get you awesome exposure to some…[Read more]

Seunghyun (Daniel) Min – Yes you are 100% correct. Having automated controls in place does call for less human errors. It makes things simple and causes less stress. It makes things easier to keep track of and it also makes it easier for companies to be visible. Versus when things are not automated. Errors can occur and go undetected.

Abhay V Kshirsagar – I see where you are coming from. But what if the controls don’t stop the leaders from getting into a negative mind state. What if they just have a knack for being unethical and just so happen to be good at their roles and made it to a high position? What do you recommend is done in this sort of scenario?

Vu Do – I agree with your thoughts about being as transparent as possible. That is something that gains a great deal of creditability. Creditability as an auditor shows that the individual encompasses noble character. These are things that make for an enjoyable exprience when working in a team setting.

A person’s character is very crucial in the audit industry. How would you build your reputation and maintain a good ethical character in this industry?

In the audit industry whether you are a client, a liason or the auditee it is very easy to distroy your reputation. I truly belive that one of the easiest ways to avoid such thing. Is to a…[Read more]

Yulun Song – I like how you integrated so many useful functions to your company. Expecting the vendor to provide adequate training beyond the basic levels is very helpful. I would imagine that you would identify these expectations initially before any business is conducted with the vendor. Is that right? I would like to know your thoughts.

Yu Ming Keung – The point you made regarding The Sarbanes Oxley Act of 2002 was good. Without this act being passed who knows exactly where the finacial industry would be today? Without it many companies would not have survived the financial crisis of 2008 and unethical practices would still be in full affect without any punishment or people being…[Read more]

Abhay V Kshirsagar – Your explanation was well thought out and articulated in a great way. I agree with your thought of the process being very complex. Every company has a level of risk they are willing to accept and some that they will absolutely under no circumstance accept. This concept to can make this formula rather complex when it comes to…[Read more]

Ming Hu – As the client would you first have a discussion with the vendor and explain your expectations? Or will you expect them to already know that these are the things you expect them to cover? What if they are not capable of fullfilling your requirements? Will you work with vendor until you are on the same page.

SAP is a world class ERP system provider. If you are an SAP customer – what would you expect them to provide to support your company’s internal controls? As an SAP customer I would expect the provider to fulfill the user requirements that would have been outlined and identified in the initial contract. This action sort of falls under the user acc…[Read more]

Deepali – This was a great example. Did this healthcare facility abide by HIPAA and ways to protect PII? I never heard of this type of audit. But the world of audit is so grand and detailed in every aspect. Did you find this work interesting? How involved were you with the findings ratings? I am also curious to know how did the company detect…[Read more]

Yu Ming Keung – I agree with your thought of streamlining gap analysis, meshing compliance and security practices. However, I am curious to know more about your thought on kicking spreadsheets to the curb. How would you automate the information gathering process, and also how do you think it will truly be beneficial? I think the two really strong…[Read more]

Mansi – I like your point aboout remaining objective. I was once on an internal audit team, and during the audit there were findings raised. Management and the Audit team had several meetings to come to an agreement regarding the finding. Once management accepted the finding, they had to provide audit with an action plan. Throughout the entire…[Read more]

Vu Do – I know most shops operate differently. However, I think you make a good point. Audit would be concerned with your access rights as an App Developer. They would probably want to review things such as change management logs, attestation records and logical access. I don’t think Audit would be really concerned with your number of hours worked…[Read more]

1. Have you ever been involved with an internal audit or audit of your process / project? Briefly describe.

Yes. I have been included in the pre-liminary planning activities of the audit. Some of the planning activites included preparing and sending the audit start notice the client, having the kick off meeting, the initial walkthrough and…[Read more]

Sean – I see what you are saying but I do not agree. I think this sort of critical task should be left to the CEOs and CIOs of the company. If direction is coming from high up and being captured. THere leaves less room for problems that may arise when other department manage such sensitive data.

Joshua – Yes, it is important to any business operations. In having SOD in place when handling master data, It ensures the inergrity of the data. Stakeholders can rest assured that the what is being reported is correct and sharholders can make some important decsions because they can rely on the information being provided by the company. SOD can…[Read more]

Wen Ting Lu – If these transactions should be restricted since they are considered privileged rights. What are some ways the business can ensure that the access is appropriate for these tranasactions/ functions? I would probably recommentd having controls in place to catch such potential issues.

Jaspreet – I agree with your thought. Data entry is critical to a company and can cause big problems. If there are clerical errors thata are made in one department for example. It can affect how another department reports its data, This can cause a domino effect an the data integrity throughout the company with one clerical error.