Technology for the Audit Team Copyright © 2008 ACL Services Ltd. Peter B. Millar Director, Business Development 25 June 2008 ACL AuditExchange 2009

Technology for the Audit Team

Copyright © 2008 ACL Services Ltd.

Peter B. MillarDirector, Business Development25 June 2008

ACL AuditExchange™ 2009


2

ACL Services Ltd.

Analysis & Testing

Data analysisFindingsDocumentation &

presentationArchive

External Audiences

External AuditRegulators

Audit CommitteeExecutive ManagementRisk ManagementBusiness Process Management

Enterprise Audiences

A Demanding Mandate


3

ACL Services Ltd.

Audit Management& Execution

Analysis & Testing

Risk assessment Work papers, audit plan Resources, schedules &

budgets Report & track

Data analysis Findings Documentation &

presentation Archive

External Audiences

External AuditRegulators

Audit CommitteeExecutive ManagementRisk ManagementBusiness Process Management

Enterprise Audiences

Fulfilling the Mandate

Productivity: Automate critical analytic tasks

Data: Enable efficient, secure data access and management

People: Expand the use of analytics across the entire audit team


4

ACL Services Ltd.

Latest Research

PwC Report 2007Internal Audit 2012: A study examining the future of internal auditing

and the potential decline of a controls-centric approach

Protiviti ReportTop Priorities for Internal Audit in a Changing Environment

The Institute of Internal AuditCommon Body of Knowledge Professional Practices Framework

Ernst & YoungFrom Compliance to Competitive Edge – New Thinking on Internal Control


5

ACL Services Ltd.

ad hoc repetitive

2424 7 7 365365

continuous

Audit’s Goal – A Spectrum of Analysis

Specific analytic queries – performed at a point in time – for the purpose of generating audit report findings

Managed analytics – created by specialists – and deployed from a centralized, secure environment, accessible to all appropriate staff

Continual execution of automated audit tests to identify errors, anomalies, patterns

and exceptions as they occur

Explorative & investigative in nature

Seeking documented conclusions & recommendations

Periodic analysis of processes from multiple data sources

Seeking to improve the efficiency, consistency & quality of audits

“Always on” - scripted auditing & monitoring of key processes

Seeking timely notification of trends, patterns & exceptions

Supporting risk assessment & enabling organizational efficiency


6

ACL Services Ltd.

Inhibitors to Audit Productivity

ad hoc repetitive

2424 7 7 365365

continuous

Limited flexibility & scalability

Timeliness of results

Diverse consumers of information

Lack of sustainable automation

Limited visibility into department activity

Duplication of effort

Time constraints

Lack of analysis experience

Data: increasing volumes • disparity & complexity of sources • security • IT reluctance & response


7

ACL Services Ltd.

ad hoc repetitive

2424 7 7 365365

continuous

A MANAGED ANALYTICS PLATFORM for AUDIT

Audit analysis & results viewing capabilities for every member of the team

Flexible audit repository for data management, scripts & documentation, findings & logs, best practices

Integrated, market-leading extraction, transformation & loading (ETL) software

One common platform

Enabling Audit Productivity


8

ACL Services Ltd.

ad hoc repetitive

2424 7 7 365365

continuous

Audit Analytics

ACL DELIVERS VALUE

Providing increased visibility into findings, results and progress of audits

Allowing broader audit coverage by reaching all data sources across the enterprise

Helping make ACL experts more productive in automating critical analytic tasks

Enabling increased productivity across the audit department


9

ACL Services Ltd.

Management & Automation– Audit repository– User access & rights, data security– Centralized processing & scripting– Continuous auditing & monitoring

management– Configuration & management

Query & Analysis– In-depth analysis– Audit-specific commands & scripting– Logging

Data Access– Access, extract, transform, load– Specialized format connectors

Reporting & Presentation– Audit findings in graphs or tables

highlighting errors, anomalies, patterns and exceptions

Analytic Library– Location to store your proven

automated audit tests


10

ACL Services Ltd.

Audit Repository

Audit Repository – An Overview

Data General purpose data sets for

multiple use Defined data sets for specific

audit objectives Data dictionaries Data management & refresh Data access

Findings & Results File & artifact management Specific findings Logs & other documentation

Analytics Script Library Script documentation Test analytics/ scripts “Best Practices” documentation

Management & Automation

Scheduling Administration

User access & rights Search Security


11

ACL Services Ltd.

files

ACL AuditExchange

Enterprise Databases

Management & AutomationAudit Data Repository • User Access & Rights

Configuration & Management • Scheduled analytics

ETL

ACL Analytic Engine

Chief AuditExecutive

AuditExchange Server

Technical Audit Specialist

Audit TeamManager

Internal Auditor


12

ACL Services Ltd.


13

ACL Services Ltd.


14

ACL Services Ltd.


15

ACL Services Ltd.


16

ACL Services Ltd.


17

ACL Services Ltd.

ACL

Project

ETL for ACL AuditExchange

powered by

ERP

Legacy

Database

SupplyChain

Extract,

Transform

&

Load into

ACL AuditExchange

UnstructuredSemi-Structured Data

Structured Data

Office Documents

XML, XBRL

ERPs, Databases, Flat Files


18

ACL Services Ltd.

Available Data Sources

ETL for ACL AuditExchange includes: Flat files Delimited ODBC - compliant data sources Sybase SQL Informix Oracle dBase Microsoft Access Simple XML

Connectors for ERP Systems include: Oracle e-Business Suite PeopleSoft Enterprise SAP ERP, BW, CRM

Connectors for Complex Databases include: DB2 Teradata IMS for z/OS VSAM for z/OS ADABAS for z/OS

Connectors for Complex Data include:With a Complex Data Exchange, you can reach: PDF Spreadsheet data Report (Print) files Complex XML XBRL SAP Private file formatsAdd-ons to the Complex Data Exchange include format libraries for: SWIFT HIPAA HL7


19

ACL Services Ltd.


20

ACL Services Ltd.


21

ACL Services Ltd.

Enabling Audit’s Mandate

Productivity of the Audit TeamHow to do more with the same resources?

Complete more value-add audit tasks with the same staff Develop a more productive team by automating critical

analytic tasks

Understand, Access and Manage DataHow to secure direct and timely access to diverse data sources?

Reach all data sources in the enterprise with market - leading ETL technology for deeper audit coverage

Support for repetitive and continuous analysis

People and SkillsHow to realize the full potential of my team members?

Capitalize on your team’s strengths for consistent and quality audits

Retain and capture your team’s expertise and results even in the event of departmental change


22

ACL Services Ltd.