Oracle Business Flow: Audit Plan to Certification Accelerator

Design New Controls Test Internal Controls

CG0869
CG0869 CG0870
CG0870
CG0871
CG0871 CG0872
CG0872 CG0874 CG0875
Propose Define CG0874 CG0875
Propose Define && Prototype Test Define Test
New
New Design Prototype Test Define Test Controls
Controls
Design New Controls
Controls Controls Anomaly
Controls
Controls Test New Controls Anomaly
Test Controls Design
Design Sampling Detection
Procedures Controls Sampling Detection
Procedures
• Propose new internal • Define & design • Implement internal controls • Test whether internal • Ensure that the internal • Test whether internal
controls or modify procedures to test internal proposed earlier on a controls are operating controls are being controls being tested are
controls in place to controls limited basis to test their as designed tested on a sample that capable of detecting out of
mitigate risk effectiveness is representative of the bound parameters
population

Internal Controls Manager, Scripting

Test Internal Controls Findings

CG0873
CG0873 CG0879
CG0879
CG0876
CG0876 CG0877
CG0877
Test
Test Controls
Controls Document
Document
Test
Test Controls
Controls Measure
Measure
Operational
Operational Controls
Controls
Fraud
Fraud Non-
Non-
Effectiveness
Effectiveness Testing
Testing
Detection
Detection Compliance
Compliance
Procedures
Procedures
• Test whether internal controls • Test whether internal • Document all testing
• Measure to what extent the
being tested are capable of controls are effective procedures and the
internal controls were ineffective
detecting fraudulent activities results of the test
in ensuring compliance
such as unauthorized actions
and transactions

Internal Controls Manager, Tutor Internal Controls Manager

Remediation Audit Opinion/ Certification

CG0881
CG0881
CG0878
CG0878 Certify
Certify Controls
Controls
Adjust
Adjust Use
Use for
for
Controls
Controls Disclosure
Disclosure
&& Reporting
Reporting
• Business executives directs • Use internal control procedures
operational teams to adjust for internal reporting and external
internal controls, and if audit attestation to comply with
necessary to improve their Sections 302 and 404 of
effectiveness Sarbanes-Oxley legislation Enterprise Roles
Internal Controls Manager CFO CEO Audit Committee Member
Internal
External Auditor
Auditor
Not included in Accelerator offering Copyright © 2005, Oracle Corporation. All rights reserved.

October 12, 2005 Release 11i.10 Slide 1