Page 69 - DCOM509_ADVANCED_AUDITING

Advanced Auditing

Notes with precision and speed. Their imagination and passion is proven by the numerous
awards garnered. Collaborating with best-in-class customers pushes the company to excel
at what they do. In turn, Cosma International consistently strives to meet and exceed the
needs of customers.

About ADAP
ADAudit Plus is an enterprise-wide Active Directory change auditing software with reports
and alerts that:
 Address the most-needed audit and compliance demands set forth by regulatory
and government bodies.
 Assist an IT administrator in Active Directory change management.
The comprehensive reports and alerts provided by ADAudit Plus are easily
comprehendible even to technically naive users. The reports answer the four vital Ws of
Active Directory auditing: “Who” did “what” action, “when” and from “where”!

Questions:
1. Discuss the problem of the case study.
2. Give light on the consequences of the case.

Source: http://www.manageengine.com/products/active-directory-audit/case-study-cosma-
international.html
4.9 Summary

 The internal audit activity evaluates risk exposures relating to the organization’s
governance, operations and information systems, in relation to: Effectiveness and efficiency
of operations; Reliability and integrity of financial and operational information;
Safeguarding of assets; Compliance with laws, regulations, and contracts.

 Internal check is an element of internal control. Weak internal check mechanisms mandate
a greater degree of auditing procedures.

 Control procedures encompass policies and procedures established by the Management,
in order to provide for the attainment of certain objectives. These could include the existence
of systems for: An effective system of reconciliation of Books of Accounts; Check of the
arithmetical accuracy of the records; Controls over computer applications and environment;
Maintenance of control accounts and Trial Balances; Approval and control of balances;
Comparison of results of cash, security and inventory checks with accounting records;
Limiting direct physical access to assets and records, etc.
 A strong control environment (e.g. one with tight budgetary controls and an effective
audit function) can significantly complement specific controls.
 Control procedures encompass policies and procedures established by the Management,
in order to provide for the attainment of certain objectives.
 Evaluation of Internal Controls by the questionnaire methods (used in conjunction with
other methods.) is a convenient and efficient medium for documented evidence of such
review having actually taken place.

64 LOVELY PROFESSIONAL UNIVERSITY