Dashboard Reporting for Internal Audit

Jordan Lloyd
Senior Manager
Deloitte & Touche LLP
 A high level unified view showing
CAE Dashboard risk ratings of the planned audits
A high level summary of status of planned audits as derived from the risk
assessment along with the status
of the audits by completion, audit
ratings, processes and location

Ryan Woodward, Sr. Manager, Global Seller Trust

Value
- Consolidated view of all planned audits
- Allows drill down by risk rating, status, audit rating, process and location
- Eliminates the need for multiple reports
3rd Parties Risk Assessment
Risk Score Aggregation and 3rd Parties Audit Prioritization
A set of over 80 risk metrics monitored across a portfolio of thousands of 3rd parties.

Weights and scores applied and aggregated at 3rd party level to identify target 3rd parties with the highest risk for audit prioritization.

Risks is further categorized to facilitate targeted review.

Value
- Audit prioritization no longer assigned based on a fixed schedule or cycle
- Insights along a spectrum of risk genres (financial, operational etc.)
Location and Process Risk Assessment
Risk Score Aggregation and Site, Process Priority Identification
A summarized view of risk scores by locations and business processed derived from survey results rolled out to different stakeholders
to assess the risk posture associated with business processes

Value
- Site visits are no longer assigned based on a fixed schedule or cycle
- Insights along a spectrum of risk genres (cyber security, financial, etc.)
Audit Universe
Visualization to represent the audit universe
In a global set-up, majority of the organizations have entities or set-ups across countries and cities. The complicated nature of local
compliance needs followed by the need to provide assurance on internal controls across all locations and at the same time have a unified
view of all audits across the organization is the driving theme for this visualization. It harnesses the data from different audit schedules across
different time periods and presents a unified view of the audits completed across locations, processes and time.

Integrated Audit Schedule Geographical Coverage

% of Total Revnue*
(Countries Covered)
99.75%

% of Total Revenue
(Countries not Covered)
0.25%

Countries Not Covered

Country % of Total Revenue

0.000%
Bangladesh

Brunei 0.020%

0.088%
Bulgaria

Czech 0.058%

Republic

Ecuador 0.018%

0.048%
Ivory Coast

Mozambiq.. 0.000%

Pakistan 0.000%

Sri Lanka 0.014%

Status
Covered
Not Covered

Value
- Consolidated view of all planned audits across locations and processes
- Provides instant identification of location not audited over an extended period of time
Audit Universe
Visualization to represent the audit universe
In a global set-up, majority of the organizations have entities or set-ups across countries and cities. The complicated nature of local
compliance needs followed by the need to provide assurance on internal controls across all locations and at the same time have a unified
view of all audits across the organization is the driving theme for this visualization. It harnesses the data from different audit schedules across
different time periods and presents a unified view of the audits completed across locations, processes and time.

Integrated Audit Schedule and Audit Findings Dashboard

Countries Covered Audit Type # of Findings
Organization Facility Fraud Risk Quality -
Compliance Divisional ICFR Location Quality Grand Total
66
Type Inspections Assessment Health & Safe.. 2,555

43 8 51
Corporate
12 150 3 5 7 20 278 60 535
% of Scheduled Audits Org Type 1 % of Findings
8 4 5 5 8 74 74 178
100%
Org Type 2 100%
Grand Total 20 150 7 10 12 28 395 142 764

Audit Schedule by Audit Type Audit Findings Summary by Audit Type

Audit Type

Internal / External
Internal

All

All

All

All

Month
All

All

# of Findings Compliance Facility Inspections Quality ICFR

1.0 546.0 Divisional Quality - Health & Safety Fraud Risk Assessment Location

Value
- Consolidated view of all planned audits across locations and processes
- Provides instant identification of location not audited over an extended period of time
 Continuous Auditing
Analytics for continuous auditing across processes

Multiple Timely Continuous Continuous Auditing & Monitoring is

Systems Compliance review
a set of Processes used to support
Continuous
business performance management
Transactions Cost - effectiveness Process improvement
Audit & Monitoring and improve financial governance in
an effort to minimize loss and
Dynamic and flexible Assess effectiveness
Processes audit plan of controls preserve/improve overall value. It is
designed to collect data from
New Suppliers Employee hours - Daily analysis
All
Invoice amount % of total amount # of invoices % of total invoices New Vendors with activity in creation month Threshold for
daily hours
# of employees with more than 16 hours a day Frequ..
1 to 150 processes, transactions and
$10,566,760.35 1.94% 1,998 1.73% 1,315 250
16
accounts to support audit activities
231 231 229
Employees with frequent excess hours (more than 16 hours a day)
212 212
Spend Type New vendors created Invoices with new vendors Invoices by new vendors - by Region Total hours (ex- 200
193
3rd Party Spend 190

ceeding the
$
5M $4.7M

200
$2,000K
$
200

4M
800 threshold)
80,383
150
195 198
and continually improve business
All 600 # of employees 176
198
186

# of invoices raised

Num
100
Inv
$1,000K
$

$
$ $
$
$

$
$
$ $
100

Number of in
3M
$2.9M

400
exceeding thresh-
old
631
Num
100
157
169

processes and activities while

0 0
$0K
Inv
2M

1M
$1.4M
$1.3M Number o
200 All
50

33 36 36 33 31 26 24
adhering to compliance standards
0
July 2015
May
June 2015
April
2015 201 July 2015
JuneMay 20152015
April
2015 $0.2M January Februa.. March April May June July
August 2015 March March 0M 0 All
Total instances with more than16 hours a day
August 2015
January 2016
October 2015 January 2016
October 2015 Employee Name
Feb Feb Americ.. Corpor.. Europe Middl.. Pacifi..
December
November2015
2015 2015
September December 2015
November 2015 2015
September All
590
600 576 575
3rd Party Spend All Daily hours by employee (more than 16 hours a day)

Stratification of invoice amount Invoices by vendor 500 452

469
484

for new vendors All 434

411650 406500 414462
150
600 532 945,197 840,613 205,516 400
483
471
400 418638
528

234 235 248 196,501 All 300 419 100

393 412
367
#V 200 120 134
417438 Tot
9 200
0
6
404576 184,949

930,945
50
406559 412503
100
<0
Employee
0-500 268,768 182,567
Contractor 107 104
500-1000 >100000
415493 0
67 59 48 57 65
0
1000-2000
2000-5000 422470

Jan 1 Feb 1 Mar 1 Jun 1 Jul 1

5000-10000
10000-100000
253,572 162,773 January February March April May June July Apr 1 May 1 Aug 1

Risk Assessment, Planning, & Fieldwork

Value
Cross-Industry
- Increase the cost-effectiveness of controls and monitoring through automated solution
- Achieve timely, and inexpensive compliance to policies and regulations
Multiple
- Shift from periodic review with limited focus to continuous review
Multiple
Continuous Auditing
Analytics for continuous auditing across processes

New Suppliers
Invoice amount % of total amount # of invoices % of total invoices New Vendors with activity in creation month
All $10,566,760.35 1.94% 1,998 1.73% 1,315

Spend Type New vendors created Invoices with new vendors Invoices by new vendors - by Region
3rd Party Spend
$
5M $4.7M
800
200
$2,000K
200 $ 4M
All 600
$ $
$1,000K
$
100 $2.9M
# of invoices raised 100 $ $
$
$
3M
$ $ $
Inv
Num Number of in 400
0 $0K 0 2M
Inv $1.4M $1.3M Number o
200
1M
July 2015
May 2015 July 2015 20152015 $0.2M
June April
2015 201 JuneMayApril
2015
August 2015 March August 2015 March 0M 0
January 2016
October 2015 January 2016
October 2015
December
November2015
2015 2015
September
Feb
December 2015
November 2015 2015
September
Feb Americ.. Corpor.. Europe Middl.. Pacifi..

3rd Party Spend

Stratification of invoice amount Invoices by vendor

for new vendors 411650 406500 414462

600 532 945,197 840,613 205,516

400 418638

234 235 248 196,501

#V 200 120 134

417438
9
0
6
404576 184,949

930,945
<0 406559 412503
0-500 268,768 182,567

500-1000 >100000
1000-2000
2000-5000 415493 422470
5000-10000
253,572 162,773
10000-100000
Continuous Auditing
Analytics for continuous auditing across processes

Employee hours - Daily analysis

Threshold for # of employees with more than 16 hours a day 1 to 150
Frequ..
daily hours 250
16 231 231 229
Employees with frequent excess hours (more than 16 hours a day)
212 212

Total hours (ex- 200 190 193

ceeding the
threshold)
80,383
150
195 198
# of employees 176
198
186
exceeding thresh- 157
169

old 100
631
Num
50

All 33 36 36 33 31 26 24
0
January Februa.. March April May June July
All
Total instances with more than16 hours a day Employee Name
All
590
600 576 575
All Daily hours by employee (more than 16 hours a day)
484
500 452
469

434
All
150
400
483
471
528

All 300 419 100

393 412
367

Tot
200
50
Employee 100
Contractor 107 104

0
67 59 48 57 65
0
January February March April May June July Jan 1 Feb 1 Mar 1 Apr 1 May 1 Jun 1 Jul 1 Aug 1
Procure to Pay Review
Risk Aggregation and Analytics for Procure to Pay Audits

Procure to Pay is a huge area

with risks associated at multiple
levels. Right from the Vendor
Setup until Payments, there are
interlinked sub-processes that
can progressively add to the
risk. The analysis performed
aggregates many risk factors to
create vendor level
aggregations of risk scores
based on triggers and behaviors
observed in transactional data.
The analysis also focuses on
areas of potential opportunities
by highlighting cases of missed
discounts or potential recoveries

Fieldwork
Value Cross-Industry
- Increased visibility of vendor spend and procurement process in it’s entirety
- Quick identification of transactions that appear inaccurate/fraudulent Financial & Operation
- Risk aggregation to identify riskiest vendors and associated drivers
Accounts Payable
Freight Analytics
Analysis of Freight Spend and Risk Scoring

Clients in the C&IP and E&R

industries have a large volume
of spend on Freight Movement.
To add complexity to the
process, there is usually a large
ecosystem of carriers that
transport materials and goods
over different routes and
transportation modes. A deep
analysis of the freight spend
helps bring risks across different
factors like route, modes,
carriers, plant etc. to the fore.
The analysis also highlights
areas of improvement via
consolidation of freight,
preferred carriers, cheapest
carriers over routes etc.

Risk Assessment & Fieldwork

Value
- Increased visibility of freight spend over the entire spectrum of modes and routes
Cross-Industry
- Quick identification of expensive carriers and routes with comparative view of relatively
cheaper carriers Operations
- Allows crisp data points for better negotiations with carriers and management of the
overall freight movement Freight
Pricing Analytics
Analysis of Pricing within Procurement

Clients with major spend on

purchase of materials generally
rely on contractual terms for
procurement of materials.
However, there are risks
associated with actual pricing
that gets entered into the
purchase orders. This analytic
looks to analyze the variation in
prices of materials over a period
of time by vendors and buyers,
and presents a risk ranked view
to show instances of purchase
with the maximum impact in
terms of overages

Fieldwork

Value Cross-Industry
- Increased visibility of prices at which materials have been procured
- Quick identification of outliers in terms of expensive purchases compared to purchase of Operational and Financial
same material at much lower price points
- Shows outliers by vendors and buyers to allow for identification of trends of expensive Procurement
procurement
This presentation contains general information only and Deloitte is not, by means of this presentation, rendering accounting, business, financial, investment, legal, tax, or other
professional advice or services. This presentation is not a substitute for such professional advice or services, nor should it be used as a basis for any decision or action that may
affect your business. Before making any decision or taking any action that may affect your business, you should consult a qualified professional advisor.

Deloitte shall not be responsible for any loss sustained by any person who relies on this presentation.

About Deloitte
Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited, a UK private company limited by guarantee (“DTTL”), its network of member firms, and their related entities.
DTTL and each of its member firms are legally separate and independent entities. DTTL (also referred to as “Deloitte Global”) does not provide services to clients. Please see
www.deloitte.com/about for a detailed description of DTTL and its member firms. Please see www.deloitte.com/us/about for a detailed description of the legal structure of Deloitte
LLP and its subsidiaries. Certain services may not be available to attest clients under the rules and regulations of public accounting. #NACACS
Copyright © 2016 Deloitte Development LLC. All rights reserved.
Member of Deloitte Touche Tohmatsu Limited