Timing is really an issue in the corporate set up. Audit season is currently in progress, and you notice something really off in the controls set up for system security. The external auditors from this prestige audit firm is already pressuring you to provide source documents that is incidentally related to your recent discovery. What is your course of action?
Question
Timing is really an issue in the corporate set up. Audit season is currently in progress, and you notice something really off in the controls set up for system security. The external auditors from this prestige audit firm is already pressuring you to provide source documents that is incidentally related to your recent discovery. What is your course of action?
Solution
-
Document the Issue: The first step is to document the issue you've discovered in the system security controls. This should include what the issue is, how you discovered it, and any potential risks it poses to the company.
-
Inform Your Supervisor: Once you've documented the issue, the next step is to inform your supervisor or manager about the problem. They need to be aware of any potential risks to the company, and they may have additional insight or advice on how to handle the situation.
-
Consult with IT Department: If the issue is technical in nature, it may be necessary to consult with the IT department. They can help determine the severity of the issue and suggest possible solutions.
-
Prepare the Requested Documents: While dealing with the discovered issue, you should also prepare the source documents that the external auditors have requested. It's important to continue fulfilling your regular duties while also addressing the problem.
-
Communicate with the Auditors: Once you've taken the above steps, it's time to communicate with the auditors. Inform them that you've discovered an issue and that you're working on resolving it. Be sure to provide them with the requested documents and any additional information they need to complete their audit.
-
Resolve the Issue: Finally, work with your supervisor, IT department, and any other necessary parties to resolve the issue. This may involve implementing new security measures, updating existing controls, or other actions depending on the nature of the problem.
Similar Questions
What occurs during a security audit?1 pointReview of an organization’s security records, activities, and other related documentsPrioritizing tasks, processes, and proceduresEthical hacking of an organization's internal network to identify vulnerabilitiesAnalyzing the efficiency of an organization's internal network
How can organizations ensure the quality of third-party auditing services? A. Implementing regular performance evaluations B. Establishing strong contractual agreements C. Conducting regular audits of auditing firms D. Providing auditors with access to all company data
audit procedures
A security analyst performs an internal security audit. They review their company’s existing assets, then evaluate potential risks to those assets. Which aspect of a security audit does this scenario describe?1 pointEstablishing the scope and goalsCompleting a controls assessmentAssessing complianceCommunicating results
Read the book Trapdoors and Trojan Horses: An Auditing Action Adventure by D. Larry Crumbley and L. Smith (publisher is Carolina Academic Press). ISBN 978-1-59460-696-0, e-ISBN 978-1-5310-0265-7 book quickly enough you can as an acceptable alternative assignment read Chapter 20 of the textbook, and write a paragraph on what was the most important thing you learned from reading it. What was the most important thing you learned from reading the book about auditing and the auditing profession ?
Upgrade your grade with Knowee
Get personalized homework help. Review tough concepts in more detail, or go deeper into your topic by exploring other relevant questions.