Skip to content
GeoDataVision
Thread Options
#661923 - 01/05/07 06:53 PM Auditing Outsourced Functions
ESK Offline
New Poster
Joined: Dec 2006
Posts: 24
Washington
Fellow auditors, when you set your audit plan for the year, have you included in your audit schedule those bank functions that are outsourced?

If so, to what extent have you audited these functions -- objectives, scope, procedures, etc.?

Specifically in my case, our federal income tax management is outsourced and the overall income tax function came up relatively risky and auditable.

Any specifics on what you're doing would be appreciated...

Steve

Return to Top
Audit
#662712 - 01/08/07 06:27 PM Re: Auditing Outsourced Functions ESK
ESK Offline
New Poster
Joined: Dec 2006
Posts: 24
Washington
Anyone... Anyone... Bueller?

Return to Top
#667264 - 01/17/07 06:00 PM Re: Auditing Outsourced Functions ESK
blue Offline
Platinum Poster
Joined: Jul 2005
Posts: 793
I have come across one area where this was very important to the function under audit. We requested a SAS 70. There isn't one so we are now working with the vendor to secure one or a SysTrust review.

Return to Top
#667641 - 01/17/07 11:30 PM Re: Auditing Outsourced Functions ESK
NotALawyer Offline
Gold Star
NotALawyer
Joined: Nov 2001
Posts: 455
We include outsourced activities in our audit plan based on the results of our annual risk assessment. This is the same as any area of the bank.

The overall approach is one of 'How does management ensure that activities are appropriately controlled'. If outsourced, what information is provided to and reviewed by management? Is there enough information for the bank to manage the vendor? Is the contract with the vendor adequate (specific obligations, problem escalation and resolution, compliance as applicable, right to audit, etc.) The same questions would apply to an affiliate vendor.

We request a copy of any outside reviews (SAS70, etc.) and review what is currently at the Bank. We can place reliance on these to the extent that they are in scope of the audit and any findings are satisfactory.

We work closely with management to ensure they understand they can outsource the function, but not the responsibility.

Return to Top
#670799 - 01/24/07 01:19 AM Re: Auditing Outsourced Functions NotALawyer
ESK Offline
New Poster
Joined: Dec 2006
Posts: 24
Washington
Great stuff, thanks for the responses...

Return to Top

Moderator:  Andy_Z