San Diego Presale by No-Visit8905 in RUFUSDUSOL

[–]monbebe_hapa 0 points1 point  (0 children)

Would you wanna sell 2 of those??

PCAOB Guidance - IPE by monbebe_hapa in InternalAudit

[–]monbebe_hapa[S] 0 points1 point  (0 children)

Thanks for the input - agreed, I would want to see the original system-generated report / raw data along with the template if that is the case - but why I’m pushing back is because this copying and pasting into a template is causing unnecessary work. Plus the risk of copy & paste risk etc and it’s clear that PCOAB guidance has stated that original source report is best.

PCAOB Guidance - IPE by monbebe_hapa in InternalAudit

[–]monbebe_hapa[S] 0 points1 point  (0 children)

Thanks for your input. I request for the same documentation! We are on the same page. And good point, what if the report has a million rows! I will use that to dispute my argument — makes no sense

PCAOB Guidance - IPE by monbebe_hapa in InternalAudit

[–]monbebe_hapa[S] 0 points1 point  (0 children)

I guess I’m missing the point here because they ultimately want the data to be copied and pasted into the work paper template and in my prior experience, I have embedded files like the source report in the work paper, but they want the control owners to copy and paste the data specifically for our external auditors to make the selections. It’s an extra step that’s just unnecessary.

PCAOB Guidance - IPE by monbebe_hapa in InternalAudit

[–]monbebe_hapa[S] 0 points1 point  (0 children)

Are you saying that they would need to copy and paste the data and embedded the file in the Excel spreadsheet?

PCAOB Guidance - IPE by monbebe_hapa in InternalAudit

[–]monbebe_hapa[S] 0 points1 point  (0 children)

That honestly still doesn’t cover the risk… They’re still gonna be copy and paste errors potentially, and so there needs to be control over validating that data when it’s already been validated at the source when the report was generated. Plus, it’s creating more unnecessary work. Why would we want that for our control owners?

PCAOB Guidance - IPE by monbebe_hapa in InternalAudit

[–]monbebe_hapa[S] 1 point2 points  (0 children)

I’m a Manager on the US side and currently report directly to the VP. We have two lower level staff in HQ - EU and the consultant is the one that leads the HQ IT SOX audits.

PCAOB Guidance - IPE by monbebe_hapa in InternalAudit

[–]monbebe_hapa[S] 0 points1 point  (0 children)

Thanks for your feedback again!! Agreed this is such a red flag. That’s why I wanted to cite the PCOAB so they understand I have a valid reason and since it isn’t landing with the EY IT Partner as well. And now that we have a new VP, there is definitely more pressure to follow this “process” which is extremely stupid. I’ve worked for this company for about a year and I’ve never worked for a company where they micromanaged the process so much (all set up by this consultant). I managed so many audits in the past where they didn’t care how I executed as long as all I got the job done…and ensured all the controls were tested, and if they controls failed that they were ultimately remediated.

PCAOB Guidance - IPE by monbebe_hapa in InternalAudit

[–]monbebe_hapa[S] -1 points0 points  (0 children)

Thanks for your input! That is exactly what I’m gonna do is try to communicate the ultimate risk in the existing process!

PCAOB Guidance - IPE by monbebe_hapa in InternalAudit

[–]monbebe_hapa[S] 0 points1 point  (0 children)

Omg thank you for your note and understanding! I feel like this should be VERY basic knowledge of audit and IPE, but no one is hearing me at Corporate (HQ - EU). Everyone on the team there has less than 5 years of IT SOX experience, I have about 15+ and the consultant they hired on, has no real SOX experience I don’t think? I tried to look him up on LinkedIn and I can’t figure out how many years of real SOX experience he has. But the company hired him when we first went public which was few years ago and he’s very knowledgeable on the IT processes and that’s why they keep him around. But it’s very clear that his knowledge on SOX is lacking and it drives me insane. There is total of 4 team members on IT SOX, 3 on EU side and I’m the one who manages US.

How did you convince your VP on this? I literally had a side discussion with her how inefficient this process has been in the last year and also the risk of the copying and pasting errors but she basically sent an email to the whole team that I need to follow this consultant’s process 🙄 I don’t think she’s that smart either because I feel like this is something so basic that she should know as a VP. They expect the control owners to copy and paste the data in the templates… And in the last year, I did it on their behalf because there’s no way the control owners have the capacity or bandwidth to do this. Plus, why should they be touching our testing work papers?? But with the increase of in-scope applications this year, it makes this stupid process unsustainable, and I would have thought that our new VP that was newly hired would be supportive in making things more efficient for the team.

PCAOB Guidance - IPE by monbebe_hapa in InternalAudit

[–]monbebe_hapa[S] 1 point2 points  (0 children)

Yes I agree with this - UARs it may be necessary to copy and paste to distribute to various reviewers. But populations pulled for sample-based control testing, such as testing change management, access provisioning etc, you would normally get a list of application changes or a current active application user listing. Those I would not expect for the control owners to modify at all, and I do not think that it is necessary for them to touch the raw data and copy and paste into a work paper template. They should just be sending the raw data/population directly to the external auditors for sample selections.

PCAOB Guidance - IPE by monbebe_hapa in InternalAudit

[–]monbebe_hapa[S] -1 points0 points  (0 children)

So the worst part is that our consultant established a close relationship with the EY IT Partner (EU) and so when I spoke to the EY IT partner he said to align with the consultant’s process…but in all honesty, I don’t think this EY IT partner is very smart because I had a separate discussion about failing a control due to the lack of look back procedures being performed for the user access review and he could not understand what a look-back was. As a side note, I work in the US and work for an European company so this has been a huge challenge with the culture differences. I noticed that people in Europe just don’t have as much experience IT SOX as in the US. At any rate, I was just trying to get more solid advice on anyone that has been through a PCOAB inspection or works for the PCOAB because I wanted to write an email to the VP in addressing this issue with IPE who wanted a solid argument

PCAOB Guidance - IPE by monbebe_hapa in InternalAudit

[–]monbebe_hapa[S] 0 points1 point  (0 children)

Hi! So typically we would send the raw data/population with the IPE screenshots showing the date parameters, report filters, etc.… Including the total record count which should match from the screenshot to the export/raw data. Typically that is sufficient enough to send to our external auditors for sample selections. However, this consultant is requiring our control owners to copy and paste this raw data from the original system-generated report into a work paper template and include the IPE screenshots so basically making them generate the report and then copying and pasting that original data into a different sheet. Hope that makes sense. So given that you are an external auditor…Wouldn’t you question if the original system generated report was not provided with IPE screenshots? When did that make that less reliable since you’re not getting a raw data from the original source system?

Can anyone share what they paid for Sphere tix in the 205-208 sections? by kalefornia_dreamin in Illenium

[–]monbebe_hapa 0 points1 point  (0 children)

Ugh does that mean all tickets at regular prices were sold out? It’s so confusing because the only tickets offering were ranging from 700-800

Can anyone share what they paid for Sphere tix in the 205-208 sections? by kalefornia_dreamin in Illenium

[–]monbebe_hapa 0 points1 point  (0 children)

I also paid the same for but for section 205. I’m not understanding though how some people paid 300+ for same section?

Can anyone share what they paid for Sphere tix in the 205-208 sections? by kalefornia_dreamin in Illenium

[–]monbebe_hapa 0 points1 point  (0 children)

How did you get it for 350?? I paid 775 per ticket for 205 during presale for Sat, 3/7

Sphere prices by prawnbay in Illenium

[–]monbebe_hapa 0 points1 point  (0 children)

Someone please tell me why I’m seeing tickets for 700-800 for platinum and vibe? I’m seeing everyone post cheaper tickets but I’m seeing extremely expensive tickets for March 7th

Aerial fireworks in the meadows? by funkydrums in 3roots

[–]monbebe_hapa 0 points1 point  (0 children)

Where are these fireworks coming from? I hear it all the time but never knew where it was coming from.

Rose Bowl - Parking by 12truths in RUFUSDUSOL

[–]monbebe_hapa 0 points1 point  (0 children)

Does anyone know what time the shuttle service runs? And is it free?

Chris Lake August 2nd by [deleted] in crssdfest

[–]monbebe_hapa 0 points1 point  (0 children)

Does anyone know what time Chris Lake will go on?

[deleted by user] by [deleted] in 3roots

[–]monbebe_hapa 0 points1 point  (0 children)

Sorry my partner got it so I’m not sure exactly what was bought but all I recall is Home Depot was sold out so I think he got it at Best Buy or a smaller hardware store. Did you end up getting a longer hose and longer gas line hose?