Management audit for small service firms /

S/N 045-000-00143-1.

Audit of consultant physicians' reply letters for referrals to clinics in a tertiary teaching hospital

Background: Doctors referring patients to consultant physicians seek reply letters which both educate and assist in ongoing patient management. Highly desirable attributes in specialist letters include clearly stated and justified: (i) diagnostic formulations, (ii) management regimens, (iii) use of clinical investigations, (iv) prog-nostic statements, (v) contingency plans and (vi) follow-up arrangements. Aim: To explicitly evaluate the quality of reply letters for new patients referred to clinics at a tertiary teaching hospital. Methods: Letters were sampled from outpatient clinics of 10 different medical specialties at Princess Alexandra Hospital in Brisbane, Australia. Reply letters for new patient referrals between 1 August 2000 and 31 October 2000 were retrieved, from which data were abstracted to calculate the proportion of letters satisfying prespecified quality attributes. Results: Of 297 new patient referrals, reply letters were retrieved for 204 (69%). Of these, 147 (72%) referrals were accompanied by a referral letter, mostly (113/147; 77%) from general practitioners. For 120 referrals involving diagnostic issues, 69 (56%) letters stated a diagnostic formulation. Of 114 letters recommending further clinical investigations, 61 (53%) described a rationale for such testing. In 125 cases where therapy was a key issue, 83 (66%) letters recommended changes to current treatment for which reasons were specified in 46 (55%) cases, and contingency plans provided in 13 (16%). Prognosis was mentioned in only 18 (9%) cases. Follow-up arrangements were detailed in 123 (60%) letters. Assessments of patient understanding and likely adherence to therapy were stated in less than 15% of -letters. Conclusions: Opportunities exist for improving quality of consultant physicians' reply letters in terms of greater use of problem lists, contingency plans, prognostic statements and patient-centred assessments, as well as more frequent enunciation of consultants' reasoning behind requests for further tests and changes to current management. Use of structured letter templates may facilitate more consistent inclusion of key information to referring doctors.

The use of internal audit by Australian companies

Purpose – The purpose of this study is to explore the voluntary use of internal audit by Australian publicly listed companies and to identify factors that lead listed companies to have an internal audit function. Design/methodology/approach – Drawing on the Institute of Internal Auditors' definition of internal auditing, the paper predicts that internal audit use is associated with factors related to risk management, strong internal controls and strong corporate governance. To test the predictions, the study combines data from a survey of listed companies with information from corporate annual reports. The paper also provides descriptive information on the use of internal audit. Findings – The results indicate that only one-third of the sample companies use internal audit. While size appears to be the dominant driver, there is also a strong association between internal audit and the level of commitment to risk management. However, the study finds only weak support for an association between the use of internal audit and strong corporate governance. Research limitations/implications – A limitation of our study is that some of the variables in the model may not be good proxies for the factors being measured. Refinement of the model and the variables used provides an opportunity for future research. Practical implications – The limited use of internal audit by Australian companies has important implications for sound corporate governance. Originality/value – This is the first study that identifies factors associated with the use of internal audit by Australian listed companies.

A software audit framework for spyware risk mitigation

Our research described in this paper identifies a three part premise relating to the spyware paradigm. Firstly the data suggests spyware is proliferating at an exponential rate. Secondly ongoing research confirms that spyware produces many security risks – including that of privacy/confidentiality breaches via illicit data collection and reporting. Thirdly, anti-spyware controls are improving but are still considered problematic for several reasons. Our research then concludes that control measures to counter this very significant challenge should merit compliance auditing – and this auditing may effectively target the vital message passing performed by all illicit data collection spyware. Our research then evolves into an experiment involving the design and implementation of a software audit tool to conduct the desired compliance auditing. The software audit tool is positioned at the protected network’s gateway. The software audit tool uses ‘phone-home’ IP addresses as spyware signatures to detect the presence of the offending software. The audit tool also has the capability to differentiate legitimate message passing software from that produced by spyware – and ‘learn’ both new spyware signatures and new legitimate message passing profiles. The testing stage of the software has proven successful – albeit using very limited levels of network message passing variety and frequency.

A tudásmenedzsment és az IT audit kapcsolódási pontjai - a tudásmenedzsment-rendszerek auditja (Connection points of knowledge management and IT audit – audit of knowledge management systems)

A cikkben a szerzők megvizsgálják a tudásmenedzsment komplex rendszerfejlesztési projektekben és az informatikai auditban játszott szerepét. Fő céljuk, hogy a tudásmenedzsment-rendszerek fejlesztéséhez kapcsolódó audit támogatására értékelési modellt készítsenek. Cikkükben megvizsgálják a tudásmenedzsmentnek az IT-auditban játszott általános szerepét, az auditban érintett tudásvagyon védelmének kérdését, a tudásmenedzsment-folyamatok szerepét a rendszerfejlesztésben (auditszempontból), a kontrollok implementálását, valamint a tudásmenedzsment és az IT-audittal kapcsolatos szabványok, módszertanok kapcsolatát. Az eredmények illusztrálására egy az Európai Unió 7. keretprogramjából finanszírozott nemzetközi projekt (GUIDE, IST–2003–507498) szolgál. ________________ Authors investigate the role of knowledge management in complex system development projects and IT audit. The primary goal is to provide an evaluation framework for an assessment of the development of special knowledge management solutions. On the other hand IT audit itself is a knowledge-dependent activity. The paper analyses the role of knowledge management in IT audit in general, the protection of knowledge assets during an audit, the role of knowledge management processes during system development (from audit point of view) and in the implementation of controls, the relationship of knowledge management with audit standards. Authors investigate the specialities of KM developments from audit point of view (particularly important aspects of audit, specific control objectives) A case study, based on experiences gained from GUIDE project (IST-2003-507498 funded by the European Commission’s 6th Framework Programme) illustrates the findings.

A bizonyosságfüggvények elméletének alkalmazása a pénzügyi kimutatások ellenőrzésében (The application of the theory of belief functions in the audit of financial statements)

A könyvvizsgálati kockázat a téves auditjelentés kiadásának kockázata olyan esetekben, amikor a beszámoló lényeges hibás állítást tartalmaz. Ez a kockázat indirekt módon a hitelintézetek és pénzügyi vállalkozások működésében is megjelenik azokban az esetekben, amikor a lényeges hibás állítást a finanszírozott vállalkozás auditált beszámolója tartalmazza, amelynek az alapján finanszírozási döntést hoznak, vagy a finanszírozás folytatásáról a beszámolóban szereplő, hibás információkból számított hitelkovenánsok alapján döntenek. A könyvvizsgálat kockázatában a vizsgált gazdálkodó üzleti kockázatai tükröződnek vissza, ezért a kockázat felmérése és az ellenőrzés ennek alapján való megtervezése, majd végrehajtása kulcsfontosságú. Jelen tanulmány – kapcsolódva a Hitelintézeti Szemle 2011. évi 4. számához – szintén a kockázat és bizonytalanság témakörét tárgyalja, pontosabban ennek egy gyakorlati vetületét: a bizonyosságfüggvények (belief functions) alkalmazását a könyvvizsgálatban; mindezt a teljesség és a tankönyvszerű rendszerfelépítés igénye nélkül. A módszer ugyanis hazánkban szinte ismeretlen, nemzetközi viszonylatban viszont empirikus kutatásban is rámutattak már az alkalmazás lehetséges előnyeire a hagyományos valószínűségelméleten alapuló számszerű kockázatbecslésekkel szemben. Eszerint a bizonyosságfüggvények jobban reprezentálják a könyvvizsgálóknak a kockázatról alkotott képét, mint a valószínűségek, mert – szemben a hagyományos modellel – nem két, hanem három állapotot kezelnek: a pozitív bizonyíték létezését, a negatív bizonyíték létezését és a bizonyíték hiányának esetét. _______ Audit risk is the risk that the auditor expresses an inappropriate audit opinion when the fi nancial statements are materially misstated. This kind of risk indirectly appears in the fi nancial statements of fi nancial institutions, when the material misstatement is in the fi nanced entity’s statements that serve as a basis for lending decisions or when the decision is made based upon credit covenants calculated from misstated information. The risks of the audit process refl ect the business risks of the auditee, so the assessment of risks, and further the planning and performance of the audit based on it is of key importance. The current study – connecting to No 4 2011 of Hitelintézeti Szemle – also discusses the topic of risk and uncertainty, or to be more precise a practical implementation of the aforementioned: the application of belief functions in the fi eld of external audit. All this without the aim of achieving completeness or textbook-like scrutiny in building up the theory. While the formalism is virtually unknown in Hungary, on the international scene empirical studies pointed out the possible advantages of the application of the method in contrast to risk assessments based on the traditional theory of probability. Accordingly, belief functions provide a better representation of auditors’ perception of risk, as in contrast to the traditional model, belief functions deal with three rather than two states: the existence of supportive evidence, that of negative evidence and the lack of evidence.

Essays on audit report lag

Audit reporting lag continues to remain an issue of significant interest to regulators, financial statement users, public companies, and auditors. The SEC has recently acted to reduce the deadline for filing annual and quarterly financial statements. Such focus on audit reporting lag arises because, as noted by the Financial Accounting Standards Board, relevance and reliability are the two primary qualities of accounting information; and, to be relevant, information has to be timely. In my dissertation, I examine three issues related to the audit report lag. The first essay focuses on the association between audit report lag and the meeting or beating of earnings benchmarks. I do not find any association between audit report lag and just meeting or beating earnings benchmarks. However, I find that longer audit report lag is negatively associated with the probability of using discretionary accruals to meet or beat earnings benchmarks. We can infer from these results that audit effort, for which audit report lag is a proxy, reduces earnings management. The second part of my dissertation examines the association between types of auditor changes and audit report lag. I find that the resignation of an auditor is associated longer audit report lag compared to the dismissal of an auditor. I also find a significant positive association between the disclosure of a reportable event and audit report lag. The third part of my dissertation investigates the association between senior executive changes and audit report lag. I find that audit report lag is longer when client firms have a new CEO or CFO. Further, I find that audit report lag is longer when the new executive is someone from outside the firm. These results provide empirical evidence about the importance of senior management in the financial reporting process.

An interactive environmental site assessment audit for Wagner Creek river basin clean up project

The primary purpose of this thesis was to design and create an Interactive Audit to conduct Environmental Site Assessments according to American Society of Testing Material's (ASTM) Phase I Standards at the Wagner Creek study area. ArcPad and ArcIMS are the major software that were used to create the model and ArcGIS Desktop was used for data analysis and to export shapefile symbology to ArcPad. Geographic Information Systems (GIS) is an effective tool to deploy these purposes. This technology was utilized to carry out data collection, data analysis and to display data interactively on the Internet. Electronic forms, customized for mobile devices were used to survey sites. This is an easy and fast way to collect and modify field data. New data such as land use, recognized environmental conditions, and underground storage tanks can be added into existing datasets. An updated map is then generated and uploaded to the Internet using ArcIMS technology. The field investigator has the option to generate and view the Inspection Form at the end of his survey on site, or print a hardcopy at base. The mobile device also automatically generates preliminary editable Executive Reports for any inspected site.

Compliance with standards, assurance and audit: does this equal security?

Postprint

Information Security in the Cloud: Should We be Using a Different Approach?

Postprint

The Effect of Non-Audit Services on Auditor Independence : A study on 11 food retail- and wholesale companies in the United Kingdom

Purpose – The purpose of this study is to investigate the effect of non-audit services on auditor independence, and the importance of non-audit services as a source of income for audit firms in the United Kingdom. Design/method/approach – This study will examine 11 companies in the food retail- and wholesale industry during 2007 - 2014. Five indicators have been used; (1) Appointed auditor and provision of non-audit services to audit clients; (2) Auditor tenure; (3) Non-audit services in relation to total services; (4) Tax-services in relation to non-audit services, (5) Big Four’s revenue. Information has been collected using the quantitative approach through annual- and transparency reports. The threshold used to measure possible independence threats (self-review-, self-interest- and familiarity threat) has been set at 18,5 %. Findings – This study concludes that the jointly provision of audit- and nonaudit services possibly causes impairment of auditor independence, and that non-audit services is an important source of income for audit firms. The findings showed that in 99 %, companies purchased non-audit services from their statutory auditor. Non-audit services in relation to total services surpassed the threshold in 78 % of all financial years. Likewise, tax-services in comparison to non-audit services exceeded the threshold in 65 % of all financial years. The Big Four’s revenue from non-audit services to audit clients in relation to total revenue is almost constantly below the threshold. However, in all financial years except from one, total revenue from non-audit services surpassed revenue from audit services by far. Contribution – The study contributes to the ongoing discussion about nonaudit services effect on auditor independence. Originality/value – This study is one of few that provide detailed information about non-audit services in the food retail- and wholesale industry. It highlights social and ethical issues with regard to agency relationships.  

Managing university records and documents in the world of governance, audit and risk: Case studies from South Africa and Malawi

There are enormous benefits for any organisation from practising sound records management. In the context of a public university, the importance of good records management includes: facilitating the achievement the university’s mandate; enhancing efficiency of the university; maintaining a reliable institutional memory; promoting trust; responding to an audit culture; enhancing university competitiveness; supporting the university’s fiduciary duty; demonstrating transparency and accountability; and fighting corruption. Records scholars and commentators posit that effective recordkeeping is an essential underpinning of good governance. Although there is a portrayal of positive correlation, recordkeeping struggles to get the same attention as that given to the governance. Evidence abounds of cases of neglect of recordkeeping in universities and other institutions in Sub-Saharan Africa. The apparent absence of sound recordkeeping provided a rationale for revisiting some universities in South Africa and Malawi in order to critically explore the place of recordkeeping in an organisation’s strategy in order to develop an alternative framework for managing records and documents in an era where good governance is a global agenda. The research is a collective case study in which multiple cases are used to critically explore the relationship between recordkeeping and governance. As qualitative research that belongs in the interpretive tradition of enquiry, it is not meant to suggest prescriptive solutions to general recordkeeping problems but rather to provide an understanding of the challenges and opportunities that arise in managing records and documents in the world of governance, audit and risk. That is: what goes on in the workplace; what are the problems; and what alternative approaches might address any existing problem situations. Research findings show that some institutions are making good use of their governance structures and other drivers for recordkeeping to put in place sound recordkeeping systems. Key governance structures and other drivers for recordkeeping identified include: laws and regulations; governing bodies; audit; risk; technology; reforms; and workplace culture. Other institutions are not managing their records and documents well despite efforts to improve their governance systems. They lack recordkeeping capacity. Areas that determine recordkeeping capacity include: availability of records management policy; capacity for digital records; availability of a records management unit; senior management support; level of education and training of records management staff; and systems and procedures for storage, retrieval and dispositions of records. Although this research reveals that the overall recordkeeping in the selected countries has slightly improved compared with the situation other researchers found a decade ago, it remains unsatisfactory and disjointed from governance. The study therefore proposes governance recordkeeping as an approach to managing records and documents in the world of governance, audit and risk. The governance recordkeeping viewpoint considers recordkeeping as a governance function that should be treated in the same manner as other governance functions such as audit and risk management. Additionally, recordkeeping and governance should be considered as symbiotic elements of a strategy. A strategy that neglects recordkeeping may not fulfil the organisation’s objectives effectively.

Industry Linkages and Audit Firms' Industry Portfolio Choice: Evidence from Product Language

Audit firms are organized along industry lines and industry specialization is a prominent feature of the audit market. Yet, we know little about how audit firms make their industry portfolio decisions, i.e., how audit firms decide which set of industries to specialize in. In this study, I examine how the linkages between industries in the product space affect audit firms’ industry portfolio choice. Using text-based product space measures to capture these industry linkages, I find that both Big 4 and small audit firms tend to specialize in industry-pairs that 1) are close to each other in the product space (i.e., have more similar product language) and 2) have a greater number of “between-industries” in the product space (i.e., have a greater number of industries with product language that is similar to both industries in the pair). Consistent with the basic tradeoff between specialization and coordination, these results suggest that specializing in industries that have more similar product language and more linkages to other industries in the product space allow audit firms greater flexibility to transfer industry-specific expertise across industries as well as greater mobility in the product space, hence enhancing its competitive advantage. Additional analysis using the collapse of Arthur Andersen as an exogenous supply shock in the audit market finds consistent results. Taken together, the findings suggest that industry linkages in the product space play an important role in shaping the audit market structure.

Energy Audit for an Old Industrial Building in Gävle

(English)The Swedish industrial sector has overcome the oil crisis and has maintained the energy use constant even though the production has grown. This has been achieved thanks to the development of several energy policies, by the Swedish government, towards the 2020 goals. This thesis carries on this path and performs an energy audit for an old industrial building in Gävle (Sweden) in order to propose different energy efficiency measures to use less energy while maintaining the thermal comfort. The building is in quite a bad shape and some of the areas are unused making them a waste of money. By means of the invoices provided by different companies, the information from the staff and some measures that have been carried out in-situ, the energy balance has been calculated from where conclusions have been drawn. Although it is an industrial building, the study is not going to be focused in the industrial process but in the building’s envelope and support processes, since the unit combines both production and office areas. Therefore, the energy balance is divided in energy supplies (district heating, free heating and sun irradiation) and energy losses (transmission, ventilation hot tap water and infiltrations). The results show that the most important supply is that of the DH whereas the most important losses are the transmission and infiltration. Thus, the measures proposed are focused on the reduction of this relevant parameters. The most important measures are the renovation of the windows, heating systems valves and the ventilation. The glazing of the dwelling is old and some of it is broken accounting for quite a large amount of the losses. The radiator valves are not properly working and there does not exist any temperature control. Therefore the installation of thermostatic valves turns out to be a must. Moreover, some part of the building has no mechanical ventilation but conserves the ducts. These could be utilized if they are connected to the workshop’s ventilation which is capable of generating sufficient flow for the entire building. Finally, although other measures could also be carried out, the ones proposed appear to be the essential ones. A further analysis should be carried out in order to analyze the payback time or investment capability of the company so as to decide between one measure or another. A market study for possible new tenants for the unused parts of the building is also advisable.