Data Analytics Working Group Update



Similar documents
Data Analytics Working Group Update

Strategy for : Fulfilling Our Public Interest Mandate in an Evolving World

G24: Audits of Controls at a Service Organization: New Standards SSAE 16 and ISAE 3402 Duff Donnelly and Jeffrey Spivack, Grant Thornton LLP

BASIS FOR CONCLUSIONS Canadian Standard on Assurance Engagements (CSAE) 3416, Reporting on Controls at a Service Organization

Update on AICPA Assurance Services Executive Committee Activities

Addressing Disclosures in the Audit of Financial Statements

Audit Data Analytics. Bob Dohrer, IAASB Member and Working Group Chair. Miklos Vasarhelyi Phillip McCollough

Qi Liu Rutgers Business School ISACA New York 2013

Work Plan for : Enhancing Audit Quality and Preparing for the Future. The IAASB s Work Plan for December 2014

ACL WHITEPAPER. Automating Fraud Detection: The Essential Guide. John Verver, CA, CISA, CMC, Vice President, Product Strategy & Alliances

How to survive an Audit

Farewell to SAS 70. What you need to know about the New Standard for Service Organization Reporting

U S I N G D A T A A N A L Y S I S T O M E E T T H E R E Q U I R E M E N T S O F R I S K B A S E D A U D I T I N G S T A N D A R D S

ISRE 2400 (Revised), Engagements to Review Historical Financial Statements

Here comes SSAE 16 SAS 70 EVOLUTION: How will the new standard affect my business? How do I prepare to meet the new requirements?

Audit Data Analytics Alert

ISSAI Planning an Audit of Financial Statements. Financial Audit Guideline

COSO 2013 Internal Control Framework

The Information Systems Audit

CONTINUOUS CONTROLS MONITORING

Webinar: PCAOB Inspections of Small Firm Broker-Dealer Auditors. January 15, 2015

EU Project N MARKT/2007/15/F LOT 2

ISA 200, Overall Objective of the Independent Auditor, and the Conduct of an Audit in Accordance with International Standards on Auditing

Integrating CA and CM into Audit, Risk and Compliance processes

Change to the Definition of Engagement Team in the Code of Ethics for Professional Accountants

Internal Audit Testing and Sampling Techniques. Chartered Institute of Internal Auditors May 2014

The Changing SAS 70 Landscape Dan Hirstein Director Rebecca Goodpasture Senior Manager Deloitte & Touche LLP January 13, 2011

IFAC s STANDARDS-SETTING PUBLIC INTEREST ACTIVITY COMMITTEES

ISAE 3402 and SSAE 16 (replacing SAS 70) Reinforcing confidence through demonstration of effective controls

Using data analytics and continuous auditing for effective risk management

Cybersecurity and the AICPA Cybersecurity Attestation Project

Interactive Auditor Dashboard (Insurance) Basma Moharram AIS - PhD Candidate Rutgers University

STANDING ADVISORY GROUP MEETING INITIATIVES TO IMPROVE AUDIT QUALITY ROOT CAUSE ANALYSIS, AUDIT QUALITY INDICATORS, AND QUALITY CONTROL STANDARDS

Effectively using SOC 1, SOC 2, and SOC 3 reports for increased assurance over outsourced operations. kpmg.com

ISAE 3000 (Revised), Assurance Engagements Other Than Audits or Reviews of Historical Financial Information

INTERNATIONAL STANDARD ON AUDITING (UK AND IRELAND) 501 AUDIT EVIDENCE SPECIFIC CONSIDERATIONS FOR SELECTED ITEMS CONTENTS

International Forum of Independent Audit Regulators Report on 2014 Survey of Inspection Findings March 3, 2015

Service Organization Control (SOC) Reports

INTERNATIONAL STANDARD ON AUDITING 600 USING THE WORK OF ANOTHER AUDITOR CONTENTS

PCAOB Concept Release on Audit Quality Indicators Summary & Considerations for Stakeholder Comment

Core Fittings C-Core and CD-Core Fittings

Being protected Using data analytics to detect fraud

STAFF QUESTIONS AND ANSWERS

Audit programs. Audit program are lists of audit procedures to be performed by audit staff in order to obtain sufficient appropriate evidence.

San Francisco Chapter. Jonathan Shipman, Ernst & Young David Morgan, Ernst & Young

Statistics 215b 11/20/03 D.R. Brillinger. A field in search of a definition a vague concept

Impact of New Internal Control Frameworks

STANDING ADVISORY GROUP MEETING

INTERNATIONAL FRAMEWORK FOR ASSURANCE ENGAGEMENTS CONTENTS

THE ABC S OF DATA ANALYTICS

INTERNATIONAL STANDARD ON AUDITING (UK AND IRELAND) 450 EVALUATION OF MISSTATEMENTS IDENTIFIED DURING THE AUDIT

INTERNATIONAL STANDARD ON ASSURANCE ENGAGEMENTS (ISAE) 3402 ASSURANCE REPORTS ON CONTROLS AT A SERVICE ORGANIZATION

SESSION 3 AUDIT PLANNING

Goodbye, SAS 70! Hello, SSAE 16!

) ) ) ) ) ) ) ) ) ) ) )

Information Visualization WS 2013/14 11 Visual Analytics

Professional Development for Engagement Partners Responsible for Audits of Financial Statements (Revised)

Data Analytics Leveraging Data Visualization and Automation in Audit Real World Examples

3. Current Auditing Computerized Tools

Driving business performance Using data analytics

Understanding SAS 70 Reports on Internal Control

Audit Committee Meeting

Leveraging Data Analytics and Continuous Auditing. Internal Audit. January 9, 2014

What the Hell is Big Data?

California ISO Audit of the Financial Statements for the Year Ending December 31, 2015 December 18, 2015

IAASB. CHALLENGES in AUDITING FAIR VALUE ACCOUNTING ESTIMATES STAFF AUDIT PRACTICE ALERT OCTOBER Background

Risk Management in Role-based Applications Segregation of Duties in Oracle

Trends in Information Technology (IT) Auditing

IT Audit Perspective on Continuous Auditing/ Continuous Monitoring KPMG LLP

Weighing in on the Benefits of a SAS 70 Audit for Third Party Data Centers

The Power of Risk, Compliance & Security Management in SAP S/4HANA

CIIA South West Analytics in Internal Audit - Tackling Fraud

Career Opportunities in Healthcare Analytics presented by Kaiser Permanente Northwest Region. Today s Speakers. Friday, May 13 at 1:00 pm.

How Big Data and Predictive Analytics are Transforming the World of Accounting and Auditing

Documenting and testing internal controls: issues that continue to challenge auditors

Guide to Using International Standards on Auditing in the Audits of Small- and Medium-Sized Entities. Volume 1 Core Concepts Second Edition

OFFICE OF AUDITS & ADVISORY SERVICES ACCOUNTS PAYABLE VENDOR MASTER FILE AUDIT FINAL REPORT

Weighing in on the Benefits of a SAS 70 Audit for Payroll Service Providers

Shared Service System Audits: What User Management and Auditors Need to Know

Multiple Auditing Standards and Standard Setting: Implications for Practice and Education

Navigating the Standards for Information Technology Controls

Fighting Fraud with Data Mining & Analysis

Transcription:

Working Group Update Bob Dohrer, IAASB Member and Working Group Chair IAASB Meeting June 2015 Agenda Item 3-A Page 1

Audit Data Analytics Agenda Current Landscape What Is It? Audit Data Analytics and the ISAs The Key Areas Benefits to Audit Quality Challenges to Adoption and Implementation Working Group Planned Outreach Concluding Thought Page 2

Audit Data Analytics Current Landscape Data is an ever increasing aspect of today s world Audit Data Analytics is a topic of great interest to many, including: Audit Standard Setters Practitioners Academia Regulators Companies Technology in the audit to date incremental changes versus audit transformation Page 3

Audit Data Analytics What Is It? Audit Relevant Data Audit Data Analytics (ADA) is the science and art of discovering and analyzing patterns, identifying anomalies, and extracting other useful information in the data underlying or related to the subject matter of an audit through analysis, modeling and visualization for the purpose of planning or performing the audit. AICPA White Paper Reimagining Auditing in a Wired World (August 2014) Page 4

Audit Data Analytics and the ISAs External audits being performed in the digital age Different views on whether ISAs are fit for Audit Data Analytics: Are ISAs prohibitive? Are they agnostic? And should they: Be more encouraging perhaps through guidance? Require use of Audit Data Analytics in the audit? Page 5

Audit Data Analytics and the ISAs Possible ISAs Impacted ISA 230 Page 6

Audit Data Analytics The Key Areas Auditing Standards Analytical and risk assessment procedures standards Defining what constitutes audit evidence (electronic audit evidence) Quantifying audit evidence: whole populations versus sampling Data validation (completeness and accuracy) Controls over information technology (e.g., change management, managing access processes) Documentation requirements Controls testing nature and relevance Page 7

Audit Data Analytics The Key Areas (continued) Audit Data Standards Data Access / Capture Access to company s data (data security) Data Analysis Visual exploratory techniques (e.g., Scatterplots, heatmaps, relationship maps) Confirmatory (mathematical and analytical) techniques (e.g., regression analysis, extraction and summarization of data) Sales Y 400 380 360 340 320 300 280 260 240 220 200 100 120 140 160 180 200 220 240 Cost of Sales, X Page 8

Audit Data Analytics Benefits to Audit Quality Improved coverage Analyzing larger populations More focused selection for testing Enhanced Risk Focus and Insight Enabling top-down, risk based approach Better understanding of entity and its environment leading to enhanced risk assessment Support professional skepticism Assess management s representations by analysis of financial transactions Opportunities for more fraud detection techniques? Page 9

Audit Data Analytics Challenges to Adoption and Implementation Audit Data Analytics Challenges Data Capture Audit Evidence Auditor Experience Managing Information Volume Ability to Scale Page 10

Working Group Planned Outreach Audit Firms understand methodology developed National Standard Setters IFAC Member Bodies and Other Professional Organizations Academia, including Rutgers Business School Continuous Auditing and Reporting Lab Financial reporting systems: ERP vendors and Audit and Risk Management Software vendors Page 11

Working Group Planned Outreach (continued) Those Charged with Governance COSO Internal Auditors ISO Technical Advisory Group Regulators (e.g., IFIAR and Securities and Exchange Commission) Taxing Authorities Page 12

Concluding Thought In medicine, physicians are expected to use better technologies as they come along if they significantly improve patient outcomes at reasonable cost. In auditing, professional standards should encourage auditors to consider and use technologies that increase assurance beyond the minimum required where economically feasible. Professional standards need to be technology agnostic, but that does not mean that they should not encourage auditors to make the best use of technology to perform the best possible economically viable audits. AICPA White Paper Reimagining Auditing in a Wired World (August 2014) Page 13

www.iaasb.org