Audit planning

• US 8,712,813 B2
• Filed: 12/21/2010
• Issued: 04/29/2014
• Est. Priority Date: 01/05/2006
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: King, Nigel
• Primary Examiner(s): Chang, Edward
• Application Number:
  US12/974,261
• Publication Number:
  US 20110119107A1
• Time in Patent Office: 1,225 Days
• Field of Search: 705/7, 705/8, 705/10, 705/35
• US Class Current: 705/7
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: G06Q 10/0635 Risk analysis of enterprise or organisation activities
• CPC Class Codes: G06Q 10/0639 Performance analysis of employees; Performance analysis of enterprise or organisation operations
• CPC Class Codes: G06Q 40/08 Insurance

Abstract

An audit planning system enables users to plan effective audits by identifying audit units having potentially large impacts and risks on an enterprise and enabling users to select audit units to include in audits based on a variety of different criteria. The audit planning system displays the audit units of the enterprise and a visual indicator of the impact and risk associated with each audit unit. The audit planning system enables users to select the displayed audit units to plan an audit. The audit planning system may display audit units in an impacted financial statement, a tree map, a graph, and/or a table. The audit planning system may sort and/or display audit units with visual indicators specifying associated risks, impacts, materiality values, exposures, coverages, and/or audit costs. The audit planning system can further display visual indications of the changes in audit units'"'"' associated attributes over time.

Claims

1. A method comprising:

displaying, by a computer system, one or more audit units of an enterprise, the one or more audit units including a visual indicator of a risk value and an impact value for each audit unit, the risk value representing a likelihood of one or more risk controls for the audit unit failing, the impact value representing an estimate of the consequences of the one or more risk controls failing;

receiving, by the computer system, a selection of an audit unit in the one or more audit units from a user;

adding, by the computer system, one or more risk controls for the selected audit unit to an audit project;

executing, by the computer system, the audit project based at least in part on calculating an exposure associated with each audit unit, the exposure calculated as a product of the impact value and the risk value for each audit unit, using functions of a workflow-enabled project management application to facilitate auditing of the one or more risk controls for the selected audit unit;

wherein displaying the one or more audit units includes;

sorting the one or more audit units according to their associated exposures; and

displaying the one or more audit units in sorted order.

2. The method of claim 1 further comprising:

displaying a financial statement comprising at least one financial statement line, wherein the at least one financial statement line includes a first column presenting a total value for the line and one or more second columns presenting, for each of the one or more audit units, a value of the audit unit'"'"'s contribution to the line, and

wherein each of the one or more second columns is displayed with a color indicating the corresponding audit unit'"'"'s proportional contribution to the total value.

3. The method of claim 1, wherein the one or more audit units are displayed in a tree map.

4. The method of claim 3, wherein the tree map displays financial statement lines associated with at least one audit unit.

5. The method of claim 1, wherein the one or more audit units are displayed as points on a graph.

6. The method of claim 5, wherein the visual indicator for each audit unit includes a vector of data values indicating a change in the impact value and the risk value for the audit unit over a period of time.

7. The method of claim 1, wherein each audit unit is associated with a coverage representing a portion of the exposure mitigated by the audit unit.

8. The method of claim 1, wherein displaying the one or more audit units includes:

sorting the one or more audit units according to their associated coverages; and

displaying the one or more audit units in sorted order.

9. The method of claim 8, wherein each audit unit is associated with an audit cost specifying a total cost to audit the audit unit.

10. The method of claim 9, wherein displaying the one or more audit units includes:

determining a ratio between the coverage and the audit cost associated with each audit unit;

sorting the one or more audit units according to their ratios; and

displaying the one or more audit units in sorted order.

11. A non-transitory computer-readable storage medium having stored thereon program code executable by a computer system, the program code comprising:

code that causes the computer system to display one or more audit units of an enterprise, the one or more audit units including a visual indicator of a risk value and an impact value for each audit unit, the risk value representing a likelihood of one or more risk controls for the audit unit failing, the impact value representing an estimate of the consequences of the one or more risk controls failing;

code that causes the computer system to receive a selection of an audit unit in the one or more audit units from a user;

code that causes the computer system to add one or more risk controls for the selected audit unit to an audit project;

code that causes the computer system to execute the audit project based at least in part on calculating an exposure associated with each audit unit, the exposure calculated as a product of the impact value and the risk value for each audit unit, using functions of a workflow-enabled project management application to facilitate auditing of the one or more risk controls for the selected audit unit;

wherein displaying the one or more audit units includes;

sorting the one or more audit units according to their associated exposures; and

displaying the one or more audit units in sorted order.

12. The computer-readable storage medium of claim 11, wherein the program code further comprises code that causes the computer system to display a financial statement comprising at least one financial statement line, wherein the at least one financial statement line includes a first column presenting a total value for the line and one or more second columns presenting, for each of the one or more audit units, a value of the audit unit'"'"'s contribution to the line, and

wherein each of the one or more second columns is displayed with a color indicating the corresponding audit unit'"'"'s proportional contribution to the total value.

13. The computer-readable storage medium of claim 11, wherein the one or more audit units are displayed in a tree map.

14. The computer-readable storage medium of claim 13, wherein the tree map displays financial statement lines associated with at least one audit unit.

15. The computer-readable storage medium of claim 11, wherein the one or more audit units are displayed as points on a graph.

16. The computer-readable storage medium of claim 15, wherein the visual indicator for each audit unit includes a vector indicating a change in the impact value and the risk value for the audit unit over a period of time.

17. The computer-readable storage medium of claim 11, wherein each audit unit is associated with a coverage representing a portion of the exposure mitigated by the audit unit.

18. The computer-readable storage medium of claim 11, wherein displaying the one or more audit units includes:

sorting the one or more audit units according to their associated coverages; and

displaying the one or more audit units in sorted order.

19. The computer-readable storage medium of claim 18, wherein each audit unit is associated with an audit cost specifying a total cost to audit the audit unit.

20. The computer-readable storage medium of claim 19, wherein displaying the one or more audit units includes:

determining a ratio between the coverage and the audit cost associated with each audit unit;

sorting the one or more audit units according to their ratios; and

displaying the one or more audit units in sorted order.