浅析内审风险及其防范措施

内部审计是人行内部实现自我监督、自我约束的一个重要机制。在规范组织行为，提高人行经营效率和效果方面发挥了重要作用，已成为内部管理不可或缺的重要组成部分。但是由于受管理体制、职能定位、人员素质等诸多因素的影响，内部审计隐含着诸多审计风险。如何规避和防范审计风险，使风险降到最低，笔者谈一点看法。     

企业内部审计的风险控制

企业内部审计是企业内部管理系统中的一个重要组成部分,同时又是企业内部控制的一种特殊表现形式,在企业内部控制和管理中发挥着重要作用。本篇文中从审计风险的特点入手,在分析了当前我国企业内部审计现状以后,重点对企业内部审计工作中所存在的风险及风险原因进行分析与论述,并提出了相应的风险控制措施,以供相关人士参考。     

从风险管理角度浅谈我国企业内部审计

科技的进步、经济的发展给企业带来了巨大的收益,同时也带来了前所未有的风险.每一个企业都面临着成功的挑战和可能失败的风险,对风险的管理已经成为现代企业管理的重要内容.国外企业的内部审计作为董事会及其审计委员会和最高管理层实施控制的手段,在风险管理方面发挥着重要的作用.本文拟分析企业内部审计对风险管理的重要作用以及我国现阶段内部审计存在的问题并提出发展建议.     

如何改进内部审计

美国世通的财务舞弊案，给投资人和债权人带来了空前的损失，也再次引起了人们对企业内部审计的关注。根据已披露的相关调查资料，世通内部审计形同虚设，没有发挥应有的作用是导致世通轰然崩塌的主要原因之一。企业内部审计是内部控制的一个重要环节，它直接关系到企业的健康发展。在我国市场经济高速发展的今天，如何更好地发展我国的企业内部审计事业，发挥内部审计为企业健康发展服务的作用，加强企业内部审计监督是值得我们思考的一个重要问题。     

浅析新形势下如何更好发挥内部审计作用

改革开放以来，我国内部审计正处于向现代审计转型的重要时期，新形势下传统内部审计工作已无法适应现代制度发展的要求。新形势下如何更好发挥内部审计作用，是我们面临的一个重要课题。本文从内部审计的（作用）职能出发，对新形势下如何更好发挥内部审计的作用．给出了几点建议。     

内部审计存在的审计风险与化解对策

随着我国社会主义市场经济的发展和经济体制改革的不断深入,内部审计就成了企业的一种内在需求,在加强企业内部经济监督和经营管理方面发挥着重要作用.人们应正确认识审计风险,增强审计风险意识,积极有效预防和控制审计风险,是审计在维护经济秩序方面起到应有的作用.但是内部审计也存在很大风险,这就要求必须制定出真正能解决内部审计风险的对策,从而降低内部审计风险,提高审计质量,从审计的角度为企业的发展做出应有的贡献.     

如何进行追踪审计剩余风险评估

2004年1月1日起施行的《中国建设银行内部审计准则第9号：追踪审计》第9条规定：审计人员应当评估审计项目或审计事项的剩余风险、以确定对被审计单位所采取的纠正措施及其效果的接受程度。并进一步解释说，剩余风险是指被审计单位采取纠正措施后，审计机构或审计组对特定审计项目或审计事项评估的风险。评估剩条风险是实施追踪审计的一个重要步骤，是审计细对被审计单位所采取纠正措施及其效果的接受程度的评价基础和依据。随着建设银行内部审计体制改革的不断深入，开展迫踪审计已成为现场审计工作的重要组成部分，建立起相对量化、操作性强的剩余风险指标评价体系是内部审计从业人员的一项重要任务，也是确立审计权威性、发挥内部审计建设职能的重要体现。     

论电力行业内部审计风险的防控

随着我国社会经济的发展，审计监督已经成为规范经济活动不可缺少的重要工作，其在各行各业中发挥的作用也越来越显著。但近些年来，我国出现了很多审计诉讼案件，这给审计工作的开展予以了警示，审计风险的防控也被各行业所关注。目前，电力行业内部审计进入了一个总结经验、不断深化、开拓创新的阶段，如何防范和控制审计风险成为我们必须面对和思考的问题。     

企业内部审计风险控制研究

社会主义市场经济体制的不断改善，使得我国经济对外开放程度进一步加大。审计的地位越来越重要，并不断引起人们的广泛关注。这就对审计工作提出了更高的要求。企业内部审计作为企业管理体系的一部分，发挥着越来越重要的作用。内部审计是企业财务工作的一项重要工作内容，对企业会计工作起到监督和控制作用。所以，企业内部审计体系是否合理有效，对企业的管理及经营发挥着重大作用。企业内部审计过程中，存在着风险，并且这些风险是客观存在的，并受到内部环境和外部环境的共同影响。拳文就如何降低内部审计风险，作出研究分析。     

浅谈商业银行内部审计风险控制及提高审计质量措施

随着国有商业银行改革的不断深入，建立符合市场经济要求、与国际惯例接轨的现代商业银行制度，健全完善的内部控制制度，保障业务健康发展日显重要。在商业银行内控制度建设中，一个相对独立、向一级法人负责的内部审计体系的建立和完善，有着重要的作用和意义。根据内部审计职能和责任，如何加强内部审计风险控制及提高内审质量是内部审计工作必须认真解决的一个问题。     

Explaining Variability in External Audit Fees

This study examines the effect of several factors on the level of external audit fees using a multiple regression model. Audit fee data were provided by 95 US publicly held companies for the years 1983 to 1985. Variables measuring client industry membership and auditor involvement in the security registration process were proxies for client regulatory aspects. These variables were significant and provide support for the hypothesis that scale economies and/or specialization effects accrue to audit firms in dealing with the regulatory complexities faced by clients. Variables measuring auditee size and complexity, auditee/auditor loss sharing risk, and audit firm size were also significant in explaining variability in external audit fees.     

国家经济安全审计实施路径研究

国家经济安全审计是指审计机关依赖有效的审计制度对被审单位财政、财务收支和经济活动的真实性、合法性和效益性进行审计的基础上,针对经济安全的关键领域,识别、评估、预警和报告危害经济安全的风险,确保财产权益安全完整的一种审计模式。该模式奠定了审计监督在国家经济安全体系中的基础性地位。创新审计模式及审计策略、变革国家审计体制、构建以审计监督为基础的新型国家经济安全体系是国家经济安全审计的三大实施路径。     

The influence of litigation risk and internal audit source on reliance decisions

External auditor reliance on the work of internal auditors in an integrated audit of the financial statements and internal control is an important audit planning procedure that can impact audit efficiency and effectiveness. The purpose of this study is to examine how perceived auditor litigation risk and internal audit source affect external auditors' reliance decisions in an integrated audit environment under varying levels of risk of material misstatement. In an experimental study using 89 practicing Big 4 auditors, this study finds that auditors who perceive low litigation risk from placing reliance on the work of internal auditors will rely more on outsourced internal auditors than in-house internal auditors. The results also show that auditors' reliance decisions are sensitive to the level of account risk consistent with the risk-based approach to the integrated audit encouraged by the PCAOB.     

Audit Effort and Stock Price Crash Risk

We examine how stock price crash risk is affected by audit effort, as measured by audit hours. Using a unique dataset of audit hours in China, we find that audit effort is negatively related to crash risk. The negative impact of audit effort on crash risk is more pronounced for listed firms that have higher inherent risks and weaker external monitoring of their information environment. Our findings are robust to various tests, including a two-stage regression analysis, controlling for listed firm-fixed effects and audit firm-fixed effects, and using alternative measures of crash risk. In addition to audit output measures, audit effort has an incremental influence on crash risk. The effects of audit effort on crash risk continue to hold after controlling for auditor industry expertise and auditor tenure.     

政府审计与国家经济安全：理论基础和作用路径

在经济全球化的今天,对于我国日益突出的国家经济安全问题,政府审计是否应该发挥作用?如何发挥作用?本文认为,政府审计是我国国家经济安全保障体系的重要组成部分。政府审计在维护国家经济安全方面的作用路径应是针对国家经济安全政策制定与执行开展审计和审计调查,监督国家经济安全政策的贯彻实施;作为国家经济安全预警机制的重要一环,向政策制定部门反馈信息、提供意见和建议,促进政策的调整与完善。     

Estimation of deficiency risk and prioritization of information security controls: A data-centric approach

Risk of unauthorized disclosure or modification of corporate data can impact in different ways, including affecting operations, the public image and/or the firm's legal/compliance exposure. While management views risk along these dimensions, the information technology function (ITF) typically views risk from an IT infrastructure compromise viewpoint, and this drives the establishment of IT security controls. It is oftentimes difficult for the internal audit function (IAF) to assess control deficiency risk (CDR) in the area of information security, as well as estimate the importance of each in-place security control. Using a design science approach, we propose the Operational, Public image, Legal (OPL) model and method to classify the security criticality of the organization's data along three dimensions. Through an empirical study, we demonstrate how the OPL method allows for a quantitative estimation of the importance of in-place security controls as well as the CDR of missing controls. This information provides guidance on strategies for testing in-place controls during audit, as well as for determining which controls may need to be incrementally added.     

卖空机制的审计收费效应研究

卖空机制作为一种金融创新,如何在提高证券市场定价效率的同时,有效发挥外 部治理功能、改善公司治理、间接推动国内资本市场健康发展成为理论和实践中的一项重要 课题。运用多元回归模型对国内卖空机制改变审计风险、进而影响审计收费行为的实证检验表 明,随着股票卖空比率的上升,公司审计收费也相应增加。而股票卖空比率与公司审计费用受 制度环境影响显著,在市场化水平较高的地区,公司审计面临来自投资者更大的压力。此外, 公司审计收费与股票卖空比率的正相关关系会因卖空机制的存在变得更加显著。     

Machine‐independent audit trail analysis—a tool for continuous audit assurance

This paper reports the results of a research project which examines the feasibility of developing a machine‐independent audit trail analyser (MIATA). MIATA is a knowledge‐based system which performs intelligent analysis of operating system audit trails. Such a system is proposed as a decision support tool for auditors when assessing the risk of unauthorized user activity in multi‐user computer systems. It is also relevant to the provision of a continuous assurance service to clients by internal and external auditors. Monitoring user activity in system audit trails manually is impractical because of the vast quantity of events recorded in those audit trails. However, if done manually, an expert security auditor would be needed to look for two main types of events—user activity rejected by the system's security settings (failed actions) and users behaving abnormally (e.g. unexpected changes in activity such as the purchasing clerk attempting to modify payroll data). A knowledge‐based system is suited to applications that require expertise to perform well‐de?ned, yet complex, monitoring activities (e.g. controlling nuclear reactors and detecting intrusions in computer systems). To permit machine‐independent intelligent audit trail analysis, an anomaly‐detection approach is adopted. Time series forecasting methods are used to develop and maintain the user pro?le database (knowledge base) that allows identi?cation of users with rejected behaviour as well as abnormal behaviour. The knowledge‐based system maintains this knowledge base and permits reporting on the potential intruder threats (summarized in Table I). The intelligence of the MIATA system is its ability to handle audit trails from any system, its knowledge base capturing rejected user activity and detecting anomalous activity, and its reporting capabilities focusing on known methods of intrusion. MIATA also updates user pro?les and forecasts of behaviour on a daily basis. As such, it also ‘learns’ from changes in user behaviour. The feasibility of generating machine‐independent audit trail records, and the applicability of the anomaly‐detection approach and time series forecasting methods, are demonstrated using three case studies. These results support the proposal that developing a machine‐independent audit trail analyser is feasible. Such a system will be an invaluable aid to an auditor in detecting potential computer intrusions and monitoring user activity. Copyright © 2004 John Wiley & Sons, Ltd.     

The impact of audit firms’ characteristics on audit fees following information security breaches

Given the importance of auditors’ assessing business risks and evaluating internal controls, we investigate whether an audit firm’s industry expertise, tenure, and size can help its auditors better understand external and internal threats faced by the client with less effort. Using reported information security breach incidents from 2004 to 2013, we find that, consistent with prior studies, audit fees are higher after the occurrence of an information security breach. However, such an association is negatively moderated when the audit firm has industry-specific expertise, longer experience with the client, and is one of the Big 4 firms. Our results suggest that because of their better knowledge about a specific industry, increased familiarity with the client’s operations, and more resources to understand a client’s vulnerabilities and/or information security policies and procedures, these auditors are more capable of assessing the potentially changing information security risks implied by the occurrence of information security breach incidents. Our results are robust to a variety of sensitivity checks.     

Audit Committee Effectiveness and Financial Reporting Quality: Implications for Auditor Independence

Auditors participating in a survey identified oversight of financial reporting and the external audit process, and ensuring quality internal controls, as the most important functions of effective audit committees. Financial literacy or expertise, independence, and a strong commitment to perform the job effectively were noted as important attributes. The results also suggest that although audit committees have enough power to confront management on contentious issues, they are not very effective in helping to resolve financial reporting disputes. Management was identified as a key influence in affecting the nature, extent, and quality of communication between the auditor and the audit committee. Most auditors believe that it is not important for each member of the audit committee to be an expert, but it is important that they are financially literate.