Like zero-based budgeting, determine what audits to perform, not just repeat last year
Envision potential value of recommendations, to ensure that higher-value areas are covered
Define audit objectives in detail to avoid over-extending resources
Use established formats for every audit process step to slow the flurry of emails
Risk assessments should use process owners input
Audit tools are fine as long as auditors understand what is obtained and tools limitations
Not only false positives are audit tool problems, but are things fine if no exceptions show up?
Audit findings should be meaningful, not just enough to fill up a report
No comments:
Post a Comment