How do you get comfort over a report that you are not testing ITGCs over?

likefunny
Posting as :
works at
You are currently posting as works at

What EY4 said^... think of it as asking management how do they get comfort that the report from powering is complete and accurate and what procedures do they do to mitigate that risk. From there their response can be they do a tie out back to the original system (ITDM) or rely on the system that they would need to have the interface tested (ITAC) that has settings is monitored by ITGCs. Hope this helps!

like

I believe if it’s a report out of a software, such as say PowerBI and you aren’t testing ITGCs around PowerBI then you can’t rely on that report, or Management needs to implement substantive procedures for C&A purposes which they would need to do every time they utilize that report.

like

You may be able to perfom targeted/limited procedures over the reporting tool to address key IT Risks (i.e. chg Mgmt, priv access) to rely on the reports and Mgmt could do the same.

like

A report or a reporting tool?

like

You mean a reporting tool/software? And yeah maybe SOC report? 🤗

One off or throughout the year?

Also, is it just the extraction risk you're looking to cover or the data integrity risk too?

Related Posts

like

Anyone looking for a roommate in NYC? F. 31. Move-in date: May. Budget: flexible, but preferably around $3000 or less per person. Neighborhood: north of 14th street. Please DM me. Thanks!

like

The star of family photos of course was Daysy 😄

Post Photo
like

Thank you and we’re done!

Post Photo
likeupliftingfunny

Thoughts on Peloton? I bought at $32 but recent rise make me think I should buy more...

like

Recruiter “we like your skillset and experience but we are looking for a candidate with at least 8 years of experience with GDPR and CCPA”
Me: 🧐🤦🏻‍♀️

funnylike

Hi! can anyone please refer me in ZS? I’ve the job Id.

like

Leaving Goldman Sachs this month, if anybody wants a referral - feel free to DM your resume and the Job ID for which you'd like to apply.

Cheers!

like

Heya guys, actively looking for a senior/staff optical engineering position if anyone knows of anything let me know 😬

like

Who are the HH in London working with CVC?

like

Any recommendations for a book/podcast/self study materials for a new finance attorney? I have no background in finance and was assigned to a finance group. Help me!!

like

How is coforge bangalore. Is it safe to join as test automation (test Analyst) is job security is there in coforge?

Any feed back is highly appreciated.

like

Anybody joined PWC UK recently? Have some questions around allowances if you would be so kind to answer.

like

One doubt last week technical and hr round completed for me in tcs. Today when I logged in to ibegin tcs portal status shown as screening: Resume shortlisted. Whether tcs will plan to conduct interview again for me

Has anyone heard of The Next Step program at Dartmouth’s Tuck school of business? I’ve been Encouraged to apply

like

Hello... I recently travelled outside the US. My I-94 record's admission date is 11/04. However, my visa will expire on 10/16. Should I correct my I94 record?

like

She loves blankets doesn’t care it is 90 plus she will burrow. At night she is under the covers on my leg breathing heavy lol

Post Photo
likefunny

What are some of the must read books in Management Consulting?

likefunny

Additional Posts in Risk Assurance

I’m getting put up for manager a year early. I have PPMD ,SM, and M support. Pretty much support from all the key individuals on my team and in my service line. Since it is a year early if i don’t get promoted this round I know it’ll come mid year but I do expect a good salary increase still without the promo. If I don’t get the promo nor a salary increase that I’m okay with, how do I let my partner know that I will begin to entertain outside offers? some of which have offered the manager role.

like

I lead our SOC practice for a US mid tier cpa/consulting firm. I've been losing a lot of deals due to lower cost / boutique vendors who are partnered with these SOC automation platforms (Vanta, Laika, etc.). Have any of you used these tools for the audit and what has your experience been like? Thanks

like

I'm a Tech Risk SC, but have an accounting/finance background. I'm doing the FRM now for broader cert experience, is it worth doing CA long term in my area?

Any strong performing seniors looking for a pay increase and potential fast track to manager? Reach out to me. Expanding the team and would love to bring in some new talent.

like

Anyone hiring for entry level risk compliance roles?

like

Is anyone here a HITRUST CCSFP? Was the exam hard?

like

How do you all keep up with trends in risk and internal audit?

like

Does anyone still have an active Becker account that I could borrow for 2 months to study for my REG exam? Please! Thanks!

like

Does Deloitte and PWC has a dedicated app sec pen-test team? What percent of the time do you travel? Do you guys work from home or need relocation to any place in US?

like

What exit ops are there outside of testing controls all day? Getting tired of this. Resume is ready

likefunny

Does anyone have any good resources for auditing ESG?

Identifying a common process, what does this even mean 😩 please help.

like

How is IT audit at Baker Tilly? Looking to change from a big 4.

like

How do you tell your boss you're quitting without burning bridges? Please note we're in busy season for the engagements I've been staffed on, which is what makes me nervous and guilty. TIA

like

If anyone is looking for a referral as an experienced hire to the PwC DAT (Digital Assurance & Transparency - formerly Risk Assurance) practice let me know and would be happy to refer you. We are actively looking to hire.

like

I have an interview coming up for internal audit manager. Currently in external audit. When asked about my experience in ERM - what would you say Is transferable skills that I can leverage in my answer?

like

What’s it mean if your boss tells you to start looking for a new job? What would be your first step?

like

Tried to jump to a big 4 as a senior 2 in risk assurance . SF market - offered 93k base and 15k bonus. Is this worth?

Currently in Risk Assurance but have the opportunity to transfer into Deals & Strategy. Which one is better for a career long term?

like

Im looking at new job opportunities out side of PA but struggle to confidently answer how much I’m looking to be paid. I’m so worried of over asking or leaving money in the table.
I’m in a SoCal HCOL and have been asking for 100k for Senior Internal Audit Roles (2 years) and working on my CiSa.
Is that too optimistic?

like

New to Fishbowl?

Download the Fishbowl app to
unlock all discussions on Fishbowl.
That was just a preview…
Sign Up to see all discussions
  • Discover what it’s like to work at companies from real professionals
  • Get candid advice from people in your field in a safe space
  • Chat and network with other professionals in your field
Sign up in seconds to unlock all discussions on Fishbowl.

Already a user?
Login here

Share

Embed this post

Copy and paste embed code on your site

Preview

Download the
Fishbowl app

See what’s happening in your industry
from the palm of your hand.

A phone with Fishbowl app

Scan your QR code to download
Fishbowl app on your mobile

Download app

Sign up for free to view this conversation on Fishbowl

By continuing you agree to Terms of Use and Privacy Policy

Already have an account? Log in

Sign up for free to continue using Fishbowl

By continuing you agree to Terms of Use(New) and Privacy Policy(New)
Messaging rates may apply

Already have an account? Log in

For account settings, visit Fishbowl on Desktop Browser or

General

Legal