PC-based spreadsheets or databases are generally acclimated to accommodate analytical abstracts or calculations accompanying to banking accident areas aural the ambit of a SOX 404 assessment. Banking spreadsheets are generally categorized as end-user accretion (EUC) accoutrement that accept historically been absent acceptable IT controls. They can abutment circuitous calculations and accommodate cogent flexibility. However, with adaptability and ability comes the accident of errors, an added abeyant for fraud, and abusage for analytical spreadsheets not afterward the software development lifecycle (e.g. design, develop, test, validate, deploy). To remediate and ascendancy spreadsheets, accessible organizations may apparatus controls such as:
Inventory and risk-rank spreadsheets that are accompanying to analytical banking risks articular as in-scope for SOX 404 assessment. These about chronicle to the key estimates and judgments of the enterprise, area adult calculations and assumptions are involved. Spreadsheets acclimated alone to download and upload are beneath of a concern.
Perform a accident based assay to analyze spreadsheet argumentation errors. Automated accoutrement abide for this purpose.
Ensure the spreadsheet calculations are activity as advised (i.e., "baseline" them).
Ensure changes to key calculations are appropriately approved.
Responsibility for ascendancy over spreadsheets is a aggregate albatross with the business users and IT. The IT alignment is about anxious with accouterment a defended aggregate drive for accumulator of the spreadsheets and abstracts backup. The business cadre are amenable for the remainder.
Inventory and risk-rank spreadsheets that are accompanying to analytical banking risks articular as in-scope for SOX 404 assessment. These about chronicle to the key estimates and judgments of the enterprise, area adult calculations and assumptions are involved. Spreadsheets acclimated alone to download and upload are beneath of a concern.
Perform a accident based assay to analyze spreadsheet argumentation errors. Automated accoutrement abide for this purpose.
Ensure the spreadsheet calculations are activity as advised (i.e., "baseline" them).
Ensure changes to key calculations are appropriately approved.
Responsibility for ascendancy over spreadsheets is a aggregate albatross with the business users and IT. The IT alignment is about anxious with accouterment a defended aggregate drive for accumulator of the spreadsheets and abstracts backup. The business cadre are amenable for the remainder.
No comments:
Post a Comment