Laserfiche WebLink
N„�N"P'.,x�",",�'� NNfK.R'°�`dy:',7""'�"V;;W� N�'C4;n�"!h!Cr"N'��arli�u�INIWN;w��'��INN�1fi'u�Y�N�,I���'��IIN��GNII��NkN%(IMNIfIP�!E�Ni��Nf�I�NIYCd�VrY4i.Nnfi�N�i'�NdII�I�VI�Nrh���k"�'�;iINN�1111�IG�iiYrN)Y'�N�'�"(�i9191iNNiV�YNkiI���NN�NkNa➢ <br />During the systems evaluation phase, we will gain an understanding of the internal control structure of the City <br />for financial accounting and relevant operations. Next, we will identify control objectives for each type of control <br />that is material to the financial statements, and then identify and gain an understanding of the relevant control <br />policies and procedures that effectively achieve the control objectives. Finally, we will determine the nature, <br />timing, and extent of our control testing and perform tests of controls. This phase of the audit will include <br />testing of certain key internal controls: <br />• Electronic data, including general and application controls reviews and various user controls <br />Financial reporting and compliance with laws and regulations <br />We will test controls over certain key cycles. One audit efficiency initiative is to rely heavily on internal controls <br />when appropriate, and to creatively look at internal control testing to make it as efficient as possible. This means <br />not routinely performing detailed tests of transactions using large samples. We first seek to identify key <br />controls, and then identify possible testing through alternative rnethods, such as observation, interviews, and <br />re -performance. These tests serve not only to gather evidence about the existence and effectiveness of internal <br />control for purposes of assessing control risk, but also to gather evidence about the reasonableness of an <br />account balance. <br />We will also develop our internal control tests to assess the compliance with certain provisions of laws, <br />regulations, contracts, and grants for which noncompliance could have a direct: and material effect on the <br />determination of financial statement amounts. Our use of multi purpose tests allows us to provide a more <br />efficient audit without sacrificing quality. <br />Our assessment of internal controls will determine whether the City has established and maintained internal <br />controls to provide reasonable assurance that the following objectives are met: <br />Transactions are properly recorded, processed, and summarized to permit the preparation of reliable <br />financial statements and to maintain accountability over assets <br />Assets are safeguarded against loss from unauthorized acquisition, use, or disposition <br />Transactions are executed in accordance with laws and regulations that could have a direct and material <br />effect on the financial statements <br />We will finalize our audit programs during this phase. We will also provide an updated Prepared by Client Listing <br />based on our test results and our anticipated substantive testing. <br />During the internal control phase, we. will also perform a review of general and application Information Systems <br />(IS) controls for the applications that are significant to financial statements to conclude whether IS general <br />controls are properly designed and operating effectively, and consider application controls as part of the internal <br />control assessment in the financial statement audit. Our strategy for the IS review of the applications will involve <br />reviewing all the general control activities, including the computerized and manual processes. We will determine <br />the scope of work by applying the concepts of materiality and risk assessment to effectively reduce examination <br />inefficiencies. When planning this examination, we will gain an understanding of the City's operations by <br />reviewing its current controls and control objectives as documented and will also review prior years' audit work <br />and the status of corrective actions. <br />Based on our preliminary review, we will perform an initial risk assessment of each critical element in each <br />general control category, as well as an overall assessment of each control category. We will then proceed to <br />assess the significant computer -related controls. <br />