Laserfiche WebLink
Appendix A: Audit Criteria <br />United States Government Accountability Office (GAO), Standards for Internal Control in <br />the Federal Government ("Green Book") describes the monitoring internal control and <br />remediation of internal control deficiencies component: <br />Overview <br />Finally, since internal control is a dynamic process that has to be adapted continually to <br />the risks and changes an entity faces, monitoring of the internal control system is <br />essential in helping internal control remain aligned with changing objectives, <br />environment, laws, resources, and risks. Internal control monitoring assesses the quality <br />of performance over time and promptly resolves the findings of audits and other reviews. <br />Corrective actions are a necessary complement to control activities in order to achieve <br />objectives... <br />Principle 16 — Perform Monitoring Activities <br />16.01 Management should establish and operate monitoring activities to monitor the <br />internal control system and evaluate the results... <br />Internal Control System Monitoring <br />16.04 Management monitors the internal control system through ongoing monitoring and <br />separate evaluations. Ongoing monitoring is built into the entity's operations, performed <br />continually, and responsive to change. Separate evaluations are used periodically and <br />may provide feedback on the effectiveness of ongoing monitoring. <br />16.05 Management performs ongoing monitoring of the design and operating <br />effectiveness of the internal control system as part of the normal course of operations. <br />Ongoing monitoring includes regular management and supervisory activities, <br />comparisons, reconciliations, and other routine actions. Ongoing monitoring may include <br />automated tools, which can increase objectivity and efficiency by electronically compiling <br />evaluations of controls and transactions. <br />16.08 Management retains responsibility for monitoring the effectiveness of internal <br />control over the assigned processes performed by service organizations. Management <br />uses ongoing monitoring, separate evaluations, or a combination of the two to obtain <br />reasonable assurance of the operating effectiveness of the service organization's <br />internal controls over the assigned process. Monitoring activities related to service <br />organizations may include the use of work performed by external parties, such as <br />service auditors, and reviewed by management... <br />DWS Cash Receipts Audit Criteria 120 <br />