I'm starting to work on the Merchant Card Services Audit. We have no program b/c this is a new audit. Does anyone have any tips and/or an example of an audit program?

I'm basically going to start by

1. Understanding the service and the operational aspects of it via interview and observation.

2. Flow chart the operational aspects.

3. Do a Risk Assesment with my Audit Manager.

4. Write the audit program

5. Do the Audit

Any help or advice would be greatly appreciated.

Why recreate the wheel? OCC's Merchant Processing Examination Handbook

That looks like the jewel I've been searching for.

Thanks.