Audit Feild and Finding Analysis
Audit Feild and Finding Analysis
Fieldwork audit
performance& analysis
of findings
Supervised by:
Prepared by:
Field audit
Omnia Ahmed Attia
Omnia Awadin Ahmed
Analysis of findings
Mahinour nagi
Ragaa ahmed
Outline :
1. Introduction
2. Definition of audit performance.
3. Benefits of Performance Audits.
4. Categories of performance audits.
5. Principles of performance audit.
6. Requirements for a Performance Audit.
7. The performance audit process.
8. Benefits of performance audit.
9. Drawbacks of performance audit.
10. References.
1. Introduction
A performance audit is designed to examine the efficiency and effectiveness of a program,
with the goal of implementing improvements. According to Generally Accepted
Government Auditing Standards (GAGAS), the term "program" can include government
entities, activities, organizations, programs, and functions.
The specific objectives of an audit can vary. They may include effectiveness, economy,
and efficiency of a program and compliance with legal requirements. An audit's scope is
wide and can seek to determine fraud and wasteful processes that are a hindrance to the
stated objectives of a program.
4. Higher-level appointed staff and elected officials review the results of audits to
oversee the proper, legal, and cost-effective operation of public services and
programs.
5. Publication of the results allows the public to see if certain programs are worth their
tax, and they can use the information to make educated voting decisions.
6. Through performance audits organizations held to objective standards of executing
the responsibilities that they are legally authorized and charged to carry out.
8. It thus serves as a basis for learning and identifying potential improvements for the
entity being audited.
2. Efficiency, the degree to which the process produces the output at a minimum cost
of resources.
3. Quality, the degree to which the product or service meets customer expectations.
4. Timeliness, the degree to which a unit of work was done correctly and on time.
The standards for the performance audit are laid out by the GAO and cover three areas:
general, field, and reporting.
1. General Standards
General standards cover matters such as professional judgment, quality control (QC), and
competence of the auditor and the audit process. General standards seek to ensure that the
auditor is independent, capable, and abides by internal QCs.
2. Field Standards
Field standards apply to planning, gathering material for evaluation, and preparing quality
documentation. This topic seeks to outline the objectives, their purpose, and the way they
will be sought.
3. Reporting Standards
Reporting standards relate to the content of the report and the communication of the
findings. These touch on the format of the audit report and lay out to whom the report must
be disseminated and how.
1. Opening meeting
1. Introduce the auditor (audit team) to the audited if they are not already known to each
other. Confirm the purpose and scope of the audit.
2. Review the audit program.
3. Arrange for guide (s) to accompany the auditor (s) if required.
4. Agree a tentative time for the closing meeting.
5. Arrange for suitable office facilities to be made available for the auditor or auditors;
for the ‘team meeting’ prior to the closing meeting if appropriate.
6. The lead auditor shall record the names of those present at the meeting and any key
points discussed.
1. The auditor or lead auditor of a team shall complete a list of attendees at the meeting
and ensure any key discussion points are recorded.
References:
1. https://internalaudit.charlotte.edu/
2. Internal Audit Points to Fraud in D.C. Housing Authority Voucher Program
3. http://www.theiia.org/iia/index.cfm?CFID=419451&CFTOKEN=62234769
4. Goh, M. H. (2016). A Manager's Guide to Auditing and Reviewing Your
Business Continuity Management Program. Business Continuity Management
Series (2nd ed.). Singapore: GMH Pte Ltd.
5. Audit planAudit reportAudit standardsCase briefsConditions & warrantiesCost
auditDifferencesDuressInternal controlsLegal IntentionM&ANegligenceObjectives
of AuditingOccupier's liabilityOffer and acceptanceTortious liability
6. https://ico.org.uk
by the end of this seminar the learner will be able to
Outlines
Inroduction
Characteristics of Auditor
Definition of audit finding
observations, and opportunities for improvement. The auditor is not responsible for
ensuring timely, through corrective action following an audit. That is the
responsibility of the auditee’s management or process owner, who is in the best
position to know what corrective action will be most
effective.
Characteristis of Auditor
There are many great characteristics that auditory learners have them
help them thrive in classroom settings. Some of their characteristics
include:
Effect: the adverse impact that occurs when the condition is not the same as the
criteria ?
These are suggestions of areas that need attention, as to prevent possible future
non-conformances.
Non-conformances are raised by the auditor if the requirements of the ISO standard are
not being properly adhered to.
Minor non-conformances
A minor non-conformance can be defined as an instance where non compliance does not
affect the overall effectiveness of an information security management system, or the
organisation’s ability to achieve its information security goals.
Simply, minor-conformities are found when a system or requirement has evidently
been implemented correctly for the most part, but with apparent minor lapses in the
quality management system.
Major non-conformances
If the auditor finds that an organisation does not comply with its own policies,
procedures and guidelines, they will raise a major nonconformity.
Major non-conformances are typically found when there is a significant breakdown in the
organisation’s quality management system, blocking it from meeting its ISO requirements.
What can I do with non-conformances?
On the occasion that the auditor raises any non-conformances during the
audit, this will prevent your organisation from achieving or maintaining its ISO
However, the auditor will also describe the non-conformity in detail, provide evidence of
the problem, reference the clause of the requirement that is not being addressed and
summarise what should be done to rectify the nonconformity and meet the stated
requirement.
This will give you plenty of opportunity to implement corrective actions and review their
effectiveness.
3.A moderate observation would result in a failure of a process in the quality system that
may have an effect on the finished product quality or may cause delays in achieving
management system certification.
4.A minor observation would not have an effect on the finished product quality or may not
have any effect on achieving management system certification.
Definitions of audit evidence
Audit evidence is all of the information used by the auditor to support the audit
findings and conclusions and, where required, arrive at an audit opinion. Information is
data collected from documents, databases or othersources and analysed by the
Principleof evidence
The audit team aims to obtain sufficient, relevant and reliable audit evidence to ensure
that the contents of the audit report stand up to critical review. When providing an
audit opinion as in Statement of Assurance, the evidence should allow reaching a
conclusion with reasonable assurance.
Sufficiency
Sufficiency relates to the quantity of audit evidence - auditors should collect enough
evidence to enable them to substantiate their conclusions in relation to the audit
objective. Audit evidence is sufficient if there is enough of it to persuade a reasonable
person that the audit findings and conclusions are valid, and that the recommendations
are appropriate. Auditors typically do not examine all data available. This would be
impractical, prohibitively costly and unnecessary, as conclusions and opinions can
generally be reached by using sampling and other means of selecting items for testing.
There is no formula to express in absolute terms how much evidence there must be for
it to be considered sufficient. However, the quantity needed is affected by the degree
of risk and the quality of such audit evidence - the higher the quality, the less evidence
may be required.
Reliability
Audit evidence is reliable if it fulfils the necessary requirements for credibility, if the
same findings arise when tests are carried out repeatedly or when information is
obtained from different sources. The reliability of audit evidence is affected by its
source and type and is dependent on the circumstances under which it is obtained.
While recognising that exceptions may exist, audit evidence is considered more
reliable Corroboration
Relevancy
For evidence to be relevant, it should help to answer the audit objective or assertion
. Relevance also bears upon the audit criteria, audit finding and the purpose of the audit
procedure.The more an audit objective is judgement-based (like in performance audits),
the more likely the audit evidence available is to be persuasive ("points towards the
conclusion that...") than conclusive
("right/wrong") in nature.Relevance also requires the evidence to apply to the period
under review. If the audit objective so requires, the total evidence must be
representative of the entire period being audited.
Sources of evidence
Audit evidence may emanate from the following sources:
19
Analytical
objectives are being carried out and whether or not they can be improved on.
The performance audit process. A performance audit has three main phases: planning the
audit, conducting the examination, and reporting. The following are critical steps for each
of the phases. In practice, these steps often overlap, so are not strictly sequential
Overview: Provide a succinct overview of the audit’s purpose, scope, objectives, and
20
Audit Criteria: Reference the specific standards, regulations, or policies used for
evaluation.
Audit Team: List the names and roles of the auditors responsible for the
report.
Date and Signature: Conclude with the date of the report and the signature of the
lead auditor.
21
Benefits of performance Audit
Identifying areas of improvement: One of the primary benefits of conducting a
management system. These areas of improvement can range from minor tweaks
place, the audit team can identify areas where you can improve risk management
processes
management audit can help identify areas where you can improve
team can identify areas where the organization is not complying with regulations.
22
Better alignment with organizational goals: By examining the management
system, a management audit can help an organization align its processes with its
goals. It can increase the organization’s focus and accountability and help it
Check Sheet
Check sheets are simple forms with certain formats that can aid the user to record data in
an firm systematically. Data are “collected and tabulated” on the check sheet to record the
frequency of specific events during a data collection period. They prepare a “consistent,
effective, and economical approach” that can be applied in the auditing of quality
assurance for reviwing and to follow the steps in a particular process. Also, they help the
user to arrange the data for the utilization later (Montgomery, 2009; Omachonu and Ross,
2004). The main advantages of check sheets are to be very easily to apply and understand,
and it can make a clear picture of the situation and condition of the organization. They are
efficient and powerful tools to identify frequently problems, but they don’t have effective
ability to analyze the quality problem into the workplace. The chech sheets are in several,
three major types are such as Defect-location check sheets; tally check sheets, and; defect-
cause check sheets ). is depicted a tally check sheet that cn be used for collect data
Histogram
Histogram is very useful tool to describe a sense of the frequency distribution of observed
values of a variable. It is a type of bar chart that visualizes both attribute and variable data
of a product or process, also assists users to show the distribution of data and the amount of
variation within a process. It displays the different measures of central tendency (mean,
mode, and average). It should be designed properly for those working into the operation
23
process can easily utilize and understand them. Also, a histogram can be applied to
investigate and identify the underlying distribution of the variable being explored
Pareto Analysis
It introduced by an Italian economist, named Vilfredo Pareto, who worked with income
and other unequal distributions in 19th century, he noticed that 80% of the wealth was
owned by only 20% of the population. Later, Pareto principle was developed by Juran in
1950. A Pareto chart is a special type of histogram that can easily be apply to find and
prioritize quality problems, conditions, or their causes of in the organization (Juran and
Godfrey, 1998).. On the other hand, it is a type of bar chart that shows the relative
importance of variables, prioritized in descending order from left to right side of the chart.
The aim of Pareto chart is to figure out the different kind of “nonconformity” from data
figures, maintenance data, repair data, parts scrap rates, or other sources. Also, Pareto chart
can generate a mean for investigating concerning quality improvement, and improving
efficiency, “material waste, energy conservation, safety issues, cost reductions”, etc., as
Figure 4 demonstrated concerning Pareto chart, it can able to improve the production
before and after changes
Fishbone Diagram
Kaoru Ishikawa is considered by many researchers to be the founder and first promoter of
the ‘Fishbone’ diagram (or Cause-and-Effect Diagram) for root cause analysis and the
concept of Quality Control (QC) circles . Cause and effect diagram was developed by Dr.
Kaoru Ishikawa in 1943. It has also two other names that are Ishikawa diagram and
fishbone because the shape of the diagram looks like the skeleton of a fish to identify
quality problems based on their degree of importance (Neyestani, 2017). The cause and
effect diagram is a problem-solving tool that investigates and analizes systematically all
the potential or real causes that result in a single effect. On the other hand, it is an efficient
tool that equips the organization's management to explore for the possible causes of a
problem (Juran and Godfrey, 1998). This diagram can provide the problem-solving efforts
by “gathering and organizing the possible causes, reaching a common understanding of the
problem, exposing gaps in existing knowledge, ranking the most probable causes, and
studying each cause” (Omachonu and Ross, 2004). The generic categories of the cause
and effect diagram are usually six elements (causes) such as environment, materials,
24
machine, measurement, man, and method, as indicated in. Furthermore, “potential causes”
can be indicated by arrows entering the main cause arrow
Scatter Diagram
o Scatter diagram is a powerful tool to draw the distribution of information in two
dimensions, which helps to detect and analyze a pattern relationships between two quality
and compliance variables (as an independent variable and a dependent variable), and
understanding if there is a relationship between them, so what kind of the relationship is
(Weak or strong and positive or negative). The shape of the scatter diagram often shows
the degree and direction of relationship between two variables, and the correlation may
reveale the causes of a problem. Scatter diagrams are very useful in regression modeling
(Montgomery, 2009; Oakland, 2003). The scatter diagram can indicate that there is which
one of these following correlation between two variables: a) Positive correlation; b)
Negative correlation, and c) No correlation, as demonstrated
Flowchart
o Flowchart presents a diagrammatic picture that indicats a series of symbols to describe the
sequence of steps exist in an operation or process. On the other hand, a flowchart visualize
a picture including the inputs, activities, decision points, and outputs for using and
understanding easily concerning the overall objective through process. This chart as a
problem solving tool can apply methodically to detect and analyze the areas or points of
process may have had potential problems by “documenting” and explaining an operation,
so it is very useful to find and improve quality into process
Control Chart
o Control chart or Shewhart control chart was introduced and developed by Walter A.
Shewhart in the 1920s at the Bell Telephone Laboratories, and is likely the most
“technically sophisticated” for quality management (Montgomery, 2009). Control charts is
a special form of “run chart that it illustrates the amount and nature of variation in the
process over time”. Also, it can draw and describe what has been happning in the process.
Therefore, it is very important to apply control chart, becaust it can observe and moniter
process to study process that is in “statistical control” (No problem with quality) accordant
25
to the samplings or samplings are betwwen UCL and LCL (upper control limit (UCL) and
the lower control limit (LCL)). “statistical control” is not between UCL and LCL, so it
means the process is out of control, then control can be applied to finde causes of quality
problem, as shown in Figure 8 that A point is in control and B point is out of control. In
addition, this chart can be utilized for estimating “the parameters” and “ reducing the
variability” in a process (Omachonu and Ross, 2004). The main aim of control chart is to
prevent the defects in process. Itt is very essentialiy for different businesses and industries,
the reason is that unsatisfactories products or services are more costed than spending
expenses of prevention by some tools like controlcharts (Juran and Godfrey, 1998). A
Control Chart is presented
26
Reference
ISO 9001: 2015, Internal Audits Made Easy, Tools, Techniques, and Step- by- step
Guidelines for successful internal audits, Fourth Edition.
S. Leonard, GMP/ISO, Quality Audit Manual for Healthcare Manufacturers and Their
Suppliers, VOLUME 1, Sixth Edition.
K.H Spencer Pickett, The internal auditing Hanabook,Third EditionHenning Kagermann,
William
Kinney,Karlheinz Kuting, Claus-Peter Weber (Eds), Internl Audit Handbook
IPPF standards-2017
Audit finding p.d.f
ELLIS, D. et al., 1993. Information audits, communication audits and : a review and
survey. International Journal of audit funding, 13(2), pp. 29–47.
HENCZEL, S., 2001. The Audit finding t: a practical guide. Wiltshire: Anthony Rowe
Ltd.
HENCZEL, S., 2000. The audit funding as a first step towards effective knowledge
management. IFLA Publications, 108(1), pp. 91–106.
MEARNS, M.A. and DU TOIT, A.S.A., 2008. Knowledge audit: Tools of the trade
transmitted to tools for tradition.
International Journal of audit finding, 28(1), pp. 161–167.
27