Do you have the technical knowledge to conduct an audit of an analytic dashboard? If not, you should go get it as soon as possible. As of February 2017, all the most used audit standards allow us to bring specialists into our audit teams to train and enhance our capabilities. If your team finds itself in need of some technical knowledge, find an expert and learn from them!
While giving a presentation on Analytics during a recent event, one of the meeting participants asked how the Audit industry felt about data products created using Analytic processes. On first thought, I consider Analytics to be a form of “analytical procedures”. This was my response but I had to qualify it by acknowledging that I wasn’t sure how different auditing standards addressed the topic. Over the last few days I’ve been able to do some research and pull together a quick synopsis of how the most commonly used Audit standards define the work behind Analytics. In summary my initial impression was pretty close… several of major Audit standards define this type of work and emphasize the reliability of data that underpin Analytic data products.
While trying to get this blog to appear higher in internet searches, I ran into an interesting article on the Journal of Accountancy discussing Analytic Auditing. The article is written from an external audit perspective and focuses on two benefits. First analytics provides auditors with greater insights into their clients’ business that help to quickly get up to speed on the external audit customer’s business model. Also the article mentions how analytics provide better service to clients.
The article also states a position that I’ve had since learning analytics as an external auditor… that external auditors’ use of analytics lags far behind that of internal auditors. I think a key reason for this is access to and familiarity with data. As an external auditor it took several weeks for me to gain access to a new client system. Once the client granted my access, I didn’t have much time to pull something useful together. Rarely did my projects have more than one or two models. As an internal auditor, I’ve had the same difficulties getting initial access to the system. But once granted access I can continue to develop models as long as my results are useful to the organization. On certain projects/systems this period lasted for several years and allowed for deep exploration and understanding.
To me one of the most impactful sentences from this article is “The profession [external auditing] needs to achieve a “quantum leap” to redesign audit processes using today’s technology, rather than using information technology to computerize legacy audit plans and procedures. ”