Laserfiche WebLink
<br />SECTION II - SPECIFIC AUDIT APPROACH <br /> <br />Risk Assessment <br />After understanding the control environment, we will identify and assess the relevant risks to achieving the objectives <br />of the financial system. <br /> <br />Control Activities <br />The control procedures are integrated in the components of the control environment and accounting system. While <br />gaining an understanding of those areas, we will assess the control procedures that the City has in place. <br />Consideration will also be given to potential improvements to the efficiency and effectiveness of the procedures in <br />place. Any suggestions for improvement will be communicated to the appropriate person(s). <br /> <br />Information and Communication <br />We will document the formal and informal information flow relating to the processing and recording of financial <br />transactions. <br /> <br />Monitoring <br />In this final component we will review City practices that are in place to monitor the performance of its internal control <br />structure. <br /> <br />Sampling Considerations <br />Our professionals will utilize sampling methodologies designed to ensure effective audit procedures are applied in the <br />most efficient manner. <br /> <br />Sampling Techniques <br />We will utilize representative audit sampling procedures with respect to substantive tests of details and tests of <br />controls and tests of compliance, where a sample of documentation is to be tested as the principal evidence of a <br />control. During tests of controls, the tests will generally consist of a combination of corroborative inquiry and either <br />observation, examination of documents or re-performance. We will use attribute sampling to test documentary <br />evidence as documentation will be the principal corroborative evidence of identified controls. <br /> <br />Statistical and Non-statistical Sampling <br />Substantive tests of details and tests of controls can be performed using either statistically or non-statistically based <br />techniques. Statistical approaches will be based on our calculation of risk factors. If a non-statistical approach is <br />deemed appropriate, we will design our procedures to obtain levels of assurance that we judge to be equivalent to <br />those required when using statistically based techniques. <br /> <br />Sample Sizes <br />For tests of controls, sample size will be based on the planned or supported assessed level of control risk and the <br />number of planned or actual deviations expected. For substantive testwork, sample size will be a function of <br />population, materiality, and risk factors. <br /> <br />Experience In Information Systems And Technology and <br />Extent of Use of EDP Software in the Engagement <br />Our approach to auditing integrates traditional auditing techniques with a total system concept. We are actively <br />committed to using computer-based audit techniques. Our knowledge of information systems (IS) and the use of <br />paperless audit software yield significant savings in the time required to complete an audit. <br /> <br />Today's marketplace provides firms, large and small, national and local, with sophisticated computer-aided audit tools <br />necessary to perform data analysis and report generation. <br /> <br />A client's IS environment influences the nature, timing, and extent of planned auditing procedures. Because most of <br />our clients utilize computerized accounting systems, our professional team is experienced with various IS systems. <br /> <br />As computers have become more integral to the financial management system, we have met the challenge by <br />incorporating new audit techniques into the audit process. Staff members are trained on new software and are skilled <br />in a wide variety of computerized applications. <br /> <br />An important component of our audit is the review of IS general controls. We understand that the effectiveness of <br />many client control procedures is dependent on reliable computer-generated data which result from proper IS general <br />controls. Therefore, we will analyze these controls to determine the adequacy of the internal control environment. <br /> <br />Our IS expertise, combined with extensive auditing and consulting experience mean that we understand the technical <br />intricacies of complex information systems in the context of real-world application. <br /> <br />CITY OF SUNNY ISLES BEACH <br />RFP # 10-06-01 <br />Page 10 <br />