Risk-based operational audits and performance audits require a broad array of competencies. This book provides auditors and risk professionals with the understanding required to improve results during risk-based audits.Mastering the Five Tiers of Audit Competency: The Essence of Effective Auditing is an anthology of powerful risk-based auditing pra

Risk-based operational audits and performance audits require a broad array of competencies. This book provides auditors and risk professionals with the understanding required to improve results during risk-based audits.Mastering the Five Tiers of Audit Competency: The Essence of Effective Auditing is an anthology of powerful risk-based auditing pra

While the Institute of Internal Auditors (IIA) has provided standards and guidelines for the practice of internal audit through the International Professional Practice Framework (IPPF), internal auditors and Chief Audit Executives (CAEs) continue to experience difficulties when attempting to balance the requirements of the IPPF with management expe

Internal Audit Practice from A to Z addresses the practice of internal auditing using GAAS (Generally Accepted Auditing Standards), GAGAS (Generally Accepted Government Auditing Standards) and International Standards for the Professional Practice of Internal Auditing (Standards)-IPPF, International Standards Organization (ISO), International Standards of Supreme Audit Institutions (ISSAI), International Standards on Auditing (ISA) as enunciated by the Institute of Internal Auditors (IIA), International Organization of Standardizations (ISO), International Organization of Supreme Audit Institutions (INTOSAI), Government Accountability Office (GAO) & International Federation of Accountants (IFAC). Unique in that it is primarily written to guide internal auditors in the process and procedures necessary to carry out professionally accepted internal audit functions, the book includes everything necessary to start, complete, and evaluate an internal audit practice, simplifying the task for even non-professionals. Internal Audit Practice from A to Z features A rich array of forms, figures, tables, and reports, making it a practical, hands-on book Provides comprehensive content that contains all the practical guidance necessary to start, complete, and evaluate an internal audit practice Details on how to ensure quality on internal audit function through peer review Current international standards for the professional practice of internal auditing and other relevant standards for reference Checklists for all practice procedures as well as a checklist of the internal control of virtually all aspects of business function A blend of professional practice with theory. Internal Audit Practice from A to Z is comprehensively rich, global reference is a must for public, private, NGOs, institutions—every organization.

Internal auditors are expected to perform risk-based audits, but do so partially because they focus on financial and compliance risks at the expense of operational, strategic and technological ones. This limits their ability to evaluate critical risks and processes. This book merges traditional internal audit concepts and practices with contemporary quality control methodologies, tips, tools and techniques. It helps internal auditors perform value-added operational audits that result in meaningful findings and useful recommendations to help organizations meet objectives and improve the perception of internal auditors as high-value contributors, appropriate change agents and trusted advisors.

This book helps auditors understand the reality of performing the internal audit role and the importance of properly managing ethical standards. It provides many examples of ethical conflicts and proposes alternative actions for the internal auditor. Internal auditors are well-schooled on the IIA Standards, but the reality is that the pressure placed on internal auditors related to execution of work and upholding ethical standards can be very difficult. Regardless of best practice or theory, auditors must be personally prepared to manage through issues they run across.

There are many webinars and training courses on Data Analytics for Internal Auditors, but no handbook written from the practitioner’s viewpoint covering not only the need and the theory, but a practical hands-on approach to conducting Data Analytics. The spread of IT systems makes it necessary that auditors as well as management have the ability to examine high volumes of data and transactions to determine patterns and trends. The increasing need to continuously monitor and audit IT systems has created an imperative for the effective use of appropriate data mining tools. This book takes an auditor from a zero base to an ability to professionally analyze corporate data seeking anomalies.

Most organizations have been caught off-guard with the proliferation of smart devices. The IT organization was comfortable supporting the Blackberry due to its ease of implementation and maintenance. But the use of Android and iOS smart devices have created a maintenance nightmare not only for the IT organization but for the IT auditors as well. This book will serve as a guide to IT and Audit professionals on how to manage, secure and audit smart device. It provides guidance on the handling of corporate devices and the Bring Your Own Devices (BYOD) smart devices.

This book explores how digital transformation is reshaping the manner in which higher education sectors emerge, work, and evolve and how auditors should respond to this challenging and risky digital audit universe in transforming the higher education system. It serves to help professionals to understand the reality of performing the Chief Audit Executive (CAE) role in today’s evolving business economy, specifically in the higher education sector. It compares and contrasts the stated IIA standards with the challenges and realities auditors may face and provides alternative scenarios to gaining a "seat at the table." This book also provides insight into critical lessons learned when executing the CAE role relevant for digitally transforming universities. The main purpose of this study is to rethink the audit culture in the digital era and reveal the key characteristics that are open for improvement so that digitally transforming universities can be audited according to the higher education standards with a digitally supported value-added audit approach. Based on this approach, the audit culture is reassessed considering the digital university conceptual framework and business model. There are two main points to consider for the digital university work environment: traceability and auditability. In this respect, policy recommendations are made for best practices to achieve value-added digital audits in transforming universities. The book has been written from both the reality and academic perspectives of two experienced authors. Sezer is a past CAE, CEO, and long-term senior internal auditor who has worked in the internal audit role for various listed companies, financial institutions, and government entities. Erman has extensive information technology and university accreditation knowledge in the global higher education sector. This brings a blend of value-added approaches to the readers and speaks to issues about understanding and dealing with audit culture and business evolution in digitally transforming organizations along with the requirements for upholding IIA standards. Geared toward the experienced or new CAE, University Auditing in the Digital Era: Challenges and Lessons for Higher Education Professionals and CAEs can be a tool for all auditors to understand some of the challenges, issues, and potential alternative solutions when executing the role of university auditing. In addition, it can be a valuable reference for university administrators and CIOs, as well as academics and all stakeholders related to the higher education sector.

The Internet is making our daily lives as digital as possible, and this new era is called the Internet of Everything (IoE). The key force behind the rapid growth of the Internet is the technological advancement of enterprises. The digital world we live in is facilitated by these enterprises’ advances and business intelligence. These enterprises need to deal with gazillions of bytes of data, and in today’s age of General Data Protection Regulation, enterprises are required to ensure privacy and security of large-scale data collections. However, the increased connectivity and devices used to facilitate IoE are continually creating more room for cybercriminals to find vulnerabilities in enterprise systems and flaws in their corporate governance. Ensuring cybersecurity and corporate governance for enterprises should not be an afterthought or present a huge challenge. In recent times, the complex diversity of cyber-attacks has been skyrocketing, and zero-day attacks, such as ransomware, botnet, and telecommunication attacks, are happening more frequently than before. New hacking strategies would easily bypass existing enterprise security and governance platforms using advanced, persistent threats. For example, in 2020, the Toll Group firm was exploited by a new crypto-attack family for violating its data privacy, where an advanced ransomware technique was launched to exploit the corporation and request a huge figure of monetary ransom. Even after applying rational governance hygiene, cybersecurity configuration and software updates are often overlooked when they are most needed to fight cyber-crime and ensure data privacy. Therefore, the threat landscape in the context of enterprises has become wider and far more challenging. There is a clear need for collaborative work throughout the entire value chain of this network. In this context, this book addresses the cybersecurity and cooperate governance challenges associated with enterprises, which will provide a bigger picture of the concepts, intelligent techniques, practices, and open research directions in this area. This book serves as a single source of reference for acquiring the knowledge on the technology, process, and people involved in next-generation privacy and security.