The Experts below are selected from a list of 54 Experts worldwide ranked by ideXlab platform

Miklos A. Vasarhelyi - One of the best experts on this subject based on the ideXlab platform.

  • continuous monitoring of business process controls a pilot implementation of a continuous Auditing system at siemens
    International Journal of Accounting Information Systems, 2006
    Co-Authors: Michael Alles, Gerard Brennan, Alexander Kogan, Miklos A. Vasarhelyi
    Abstract:

    In this paper we report on the approach we have developed and the lessons we have learned in an implementation of the monitoring and control layer for continuous monitoring of business process controls (CMBPC) in the US Internal IT Audit department of Siemens Corporation. The architecture developed by us implements a completely independent CMBPC system running on top of Siemens’ own enterprise information system which has read-only interaction with the application tier of the enterprise system. Among our key conclusions is that “formalizability” of Audit procedures and Audit judgment is grossly underestimated. Additionally, while cost savings and expedience force the implementation to closely follow the existing and approved Internal Audit Program, a certain level of reengineering of Audit processes is inevitable due to the necessity to separate formalizable and non-formalizable parts of the Program. Our study identifies the management of Audit alarms and the prevention of the alarm floods as critical tasks in the CMBPC implementation process. We develop an approach to solving these problems utilizing the hierarchical structure of alarms and the role-based approach to assigning alarm destinations. We also discuss the content of the Audit trail of CMBPC.

  • Continuous monitoring of business process controls: A pilot implementation of a continuous Auditing system at Siemens ☆
    International Journal of Accounting Information Systems, 2006
    Co-Authors: Michael Alles, Gerard Brennan, Alexander Kogan, Miklos A. Vasarhelyi
    Abstract:

    In this paper we report on the approach we have developed and the lessons we have learned in an implementation of the monitoring and control layer for continuous monitoring of business process controls (CMBPC) in the US Internal IT Audit department of Siemens Corporation. The architecture developed by us implements a completely independent CMBPC system running on top of Siemens’ own enterprise information system which has read-only interaction with the application tier of the enterprise system. Among our key conclusions is that “formalizability” of Audit procedures and Audit judgment is grossly underestimated. Additionally, while cost savings and expedience force the implementation to closely follow the existing and approved Internal Audit Program, a certain level of reengineering of Audit processes is inevitable due to the necessity to separate formalizable and non-formalizable parts of the Program. Our study identifies the management of Audit alarms and the prevention of the alarm floods as critical tasks in the CMBPC implementation process. We develop an approach to solving these problems utilizing the hierarchical structure of alarms and the role-based approach to assigning alarm destinations. We also discuss the content of the Audit trail of CMBPC.

R R Abbott - One of the best experts on this subject based on the ideXlab platform.

  • Nuclear materials control and accountability (NMC and A) Auditors in the 90's
    1991
    Co-Authors: Barham, R R Abbott
    Abstract:

    The increase in emphasis on the adequacy of the NMC and A Internal control systems requires that management define what type of training and experience is needed by NMC and A Internal Audit Program. At Martin Marietta Energy Systems, inc. (the prime contractor for the Department of Energy at Oak Ridge, Tenn.), the Central NMC and A Manager has developed a comprehensive set of NMC and A Internal Audit policies that defines performance standards, methods of conducting Audits, mechanisms for ensuring appropriate independence for NMC and A Auditors, structure for standardized Audit reports and working papers, and a section that addresses the development of training plans for individual NMC and A Auditors. The training requirements reflect the unique combination of skills necessary to be an effective NMC and A Internal Auditor- a combination of the operational Auditing skills of a Certified Internal Auditor, the accounting Auditing capabilities of a Certified Public Accountant, and the specific technical knowledge base associated with nuclear materials. This paper presents a mechanism for identifying an individual training Program for NMC and A Auditors that considers the above requirements and the individual's long-range career goals.

  • nuclear materials control and accountability Internal Audit Program the contractor s perspective
    Nuclear Materials Management. Annual Meeting Proceedings; (United States), 1991
    Co-Authors: R R Abbott
    Abstract:

    This paper reports that the Department of Energy Order (DOE) 5633.3, Control and Accountability for Nuclear Materials, includes several requirements for development and implementation of an Internal Audit Program. Martin Marietta Energy System, Inc., manages five sites in Tennessee, Kentucky, and Ohio for the DOE Field Office, Oak Ridge and has a Central Nuclear Materials Control and Accountability (NMC and A) Manager with matrixed responsibility for the NMC and A Program at the five sites. The Energy Systems Central NMC and A Manager has developed an NMC and A Internal Audit Handbook which defines the functional responsibilities, performance criteria, and reporting and documentation requirements for the Energy Systems NMC and A Internal Audit Program. The initial work to develop and implement these standards was tested at the K-25 Site when the site hired an Internal Auditor to meet the DOE requirements for an NMC and A Internal Audit Program.

Michael Alles - One of the best experts on this subject based on the ideXlab platform.

  • continuous monitoring of business process controls a pilot implementation of a continuous Auditing system at siemens
    International Journal of Accounting Information Systems, 2006
    Co-Authors: Michael Alles, Gerard Brennan, Alexander Kogan, Miklos A. Vasarhelyi
    Abstract:

    In this paper we report on the approach we have developed and the lessons we have learned in an implementation of the monitoring and control layer for continuous monitoring of business process controls (CMBPC) in the US Internal IT Audit department of Siemens Corporation. The architecture developed by us implements a completely independent CMBPC system running on top of Siemens’ own enterprise information system which has read-only interaction with the application tier of the enterprise system. Among our key conclusions is that “formalizability” of Audit procedures and Audit judgment is grossly underestimated. Additionally, while cost savings and expedience force the implementation to closely follow the existing and approved Internal Audit Program, a certain level of reengineering of Audit processes is inevitable due to the necessity to separate formalizable and non-formalizable parts of the Program. Our study identifies the management of Audit alarms and the prevention of the alarm floods as critical tasks in the CMBPC implementation process. We develop an approach to solving these problems utilizing the hierarchical structure of alarms and the role-based approach to assigning alarm destinations. We also discuss the content of the Audit trail of CMBPC.

  • Continuous monitoring of business process controls: A pilot implementation of a continuous Auditing system at Siemens ☆
    International Journal of Accounting Information Systems, 2006
    Co-Authors: Michael Alles, Gerard Brennan, Alexander Kogan, Miklos A. Vasarhelyi
    Abstract:

    In this paper we report on the approach we have developed and the lessons we have learned in an implementation of the monitoring and control layer for continuous monitoring of business process controls (CMBPC) in the US Internal IT Audit department of Siemens Corporation. The architecture developed by us implements a completely independent CMBPC system running on top of Siemens’ own enterprise information system which has read-only interaction with the application tier of the enterprise system. Among our key conclusions is that “formalizability” of Audit procedures and Audit judgment is grossly underestimated. Additionally, while cost savings and expedience force the implementation to closely follow the existing and approved Internal Audit Program, a certain level of reengineering of Audit processes is inevitable due to the necessity to separate formalizable and non-formalizable parts of the Program. Our study identifies the management of Audit alarms and the prevention of the alarm floods as critical tasks in the CMBPC implementation process. We develop an approach to solving these problems utilizing the hierarchical structure of alarms and the role-based approach to assigning alarm destinations. We also discuss the content of the Audit trail of CMBPC.

Alexander Kogan - One of the best experts on this subject based on the ideXlab platform.

  • continuous monitoring of business process controls a pilot implementation of a continuous Auditing system at siemens
    International Journal of Accounting Information Systems, 2006
    Co-Authors: Michael Alles, Gerard Brennan, Alexander Kogan, Miklos A. Vasarhelyi
    Abstract:

    In this paper we report on the approach we have developed and the lessons we have learned in an implementation of the monitoring and control layer for continuous monitoring of business process controls (CMBPC) in the US Internal IT Audit department of Siemens Corporation. The architecture developed by us implements a completely independent CMBPC system running on top of Siemens’ own enterprise information system which has read-only interaction with the application tier of the enterprise system. Among our key conclusions is that “formalizability” of Audit procedures and Audit judgment is grossly underestimated. Additionally, while cost savings and expedience force the implementation to closely follow the existing and approved Internal Audit Program, a certain level of reengineering of Audit processes is inevitable due to the necessity to separate formalizable and non-formalizable parts of the Program. Our study identifies the management of Audit alarms and the prevention of the alarm floods as critical tasks in the CMBPC implementation process. We develop an approach to solving these problems utilizing the hierarchical structure of alarms and the role-based approach to assigning alarm destinations. We also discuss the content of the Audit trail of CMBPC.

  • Continuous monitoring of business process controls: A pilot implementation of a continuous Auditing system at Siemens ☆
    International Journal of Accounting Information Systems, 2006
    Co-Authors: Michael Alles, Gerard Brennan, Alexander Kogan, Miklos A. Vasarhelyi
    Abstract:

    In this paper we report on the approach we have developed and the lessons we have learned in an implementation of the monitoring and control layer for continuous monitoring of business process controls (CMBPC) in the US Internal IT Audit department of Siemens Corporation. The architecture developed by us implements a completely independent CMBPC system running on top of Siemens’ own enterprise information system which has read-only interaction with the application tier of the enterprise system. Among our key conclusions is that “formalizability” of Audit procedures and Audit judgment is grossly underestimated. Additionally, while cost savings and expedience force the implementation to closely follow the existing and approved Internal Audit Program, a certain level of reengineering of Audit processes is inevitable due to the necessity to separate formalizable and non-formalizable parts of the Program. Our study identifies the management of Audit alarms and the prevention of the alarm floods as critical tasks in the CMBPC implementation process. We develop an approach to solving these problems utilizing the hierarchical structure of alarms and the role-based approach to assigning alarm destinations. We also discuss the content of the Audit trail of CMBPC.

Gerard Brennan - One of the best experts on this subject based on the ideXlab platform.

  • continuous monitoring of business process controls a pilot implementation of a continuous Auditing system at siemens
    International Journal of Accounting Information Systems, 2006
    Co-Authors: Michael Alles, Gerard Brennan, Alexander Kogan, Miklos A. Vasarhelyi
    Abstract:

    In this paper we report on the approach we have developed and the lessons we have learned in an implementation of the monitoring and control layer for continuous monitoring of business process controls (CMBPC) in the US Internal IT Audit department of Siemens Corporation. The architecture developed by us implements a completely independent CMBPC system running on top of Siemens’ own enterprise information system which has read-only interaction with the application tier of the enterprise system. Among our key conclusions is that “formalizability” of Audit procedures and Audit judgment is grossly underestimated. Additionally, while cost savings and expedience force the implementation to closely follow the existing and approved Internal Audit Program, a certain level of reengineering of Audit processes is inevitable due to the necessity to separate formalizable and non-formalizable parts of the Program. Our study identifies the management of Audit alarms and the prevention of the alarm floods as critical tasks in the CMBPC implementation process. We develop an approach to solving these problems utilizing the hierarchical structure of alarms and the role-based approach to assigning alarm destinations. We also discuss the content of the Audit trail of CMBPC.

  • Continuous monitoring of business process controls: A pilot implementation of a continuous Auditing system at Siemens ☆
    International Journal of Accounting Information Systems, 2006
    Co-Authors: Michael Alles, Gerard Brennan, Alexander Kogan, Miklos A. Vasarhelyi
    Abstract:

    In this paper we report on the approach we have developed and the lessons we have learned in an implementation of the monitoring and control layer for continuous monitoring of business process controls (CMBPC) in the US Internal IT Audit department of Siemens Corporation. The architecture developed by us implements a completely independent CMBPC system running on top of Siemens’ own enterprise information system which has read-only interaction with the application tier of the enterprise system. Among our key conclusions is that “formalizability” of Audit procedures and Audit judgment is grossly underestimated. Additionally, while cost savings and expedience force the implementation to closely follow the existing and approved Internal Audit Program, a certain level of reengineering of Audit processes is inevitable due to the necessity to separate formalizable and non-formalizable parts of the Program. Our study identifies the management of Audit alarms and the prevention of the alarm floods as critical tasks in the CMBPC implementation process. We develop an approach to solving these problems utilizing the hierarchical structure of alarms and the role-based approach to assigning alarm destinations. We also discuss the content of the Audit trail of CMBPC.