Audit-Related IT and Process Services Our Services at a Glance HLB Dr. Schumacher & Partner GmbH Wirtschaftsprüfungsgesellschaft Steuerberatungsgesellschaft
Project-Related Review & Quality Assurance for Implementation or Migration Projects
Customer’s situation:
Our services: Project-related review or quality assurance support in IT projects.
Our solution:
§ a new It system is to be implemented (e.g. SAP or Navision) § a new process is to be implemented (e.g. IFRS accounting or accounting process) § functional extension of an existing IT system (e.g. implementation of an additional SAP module) § Migration of accounting data due to changes under company law (e.g. by acquisitions, disposals, mergers, splittings etc.)
§ We support the project manager and the company management in tracking the project objectives, in managing the various compliance requirements as well as in limiting the project risks. § Our support is related to project management, concepts and future system design, testing and go-live. § We evaluate the conception and test methods, data migration, system settings, effects on processes and the internal control system (ICS) as well as the future IT operation.
Benefit for the customer: § Limitation of project risks (time, costs, quality) § Achievement of project objectives § Avoidance of complex cost-intensive rework due to conversion problems § Proper conversion and continuous IT operation
Process Analysis and Process Optimization
Customer situation:
Our services: Recording, documentation and evaluation of current processes and development of target processes. Support in the implementation and steady improvement.
Our solution:
§ Processes are newly set up or changed (e.g. by reorganization or system changes) § Process quality is low (high failure rates, backlogs, high manual effort, unnecessary loops) § Process controls are insufficient (not enough or ineffective controls) § Irregularities or embezzlement occurred
§ Recording and documentation of business processes and controls (modelling such as EPCs and/or flow charts) § Support in determining critical business processes, which could have a sustainable negative influence on the business operation in case of a failure § Performance of data analyses to check process quality and compliance with standards § Support in organization and implementation of process changes and internal controls with regard to effective, sustainable and efficient processes
Benefit for the customer: § We link accounting, IT and process know-how § Evidence of correctness and security of business processes § Cost savings by efficient processes and riskorientated controlling structures § Contribution to safeguarding business objections and improved risk management
Implementation and Optimization of the Internal Control System
Customer‘s situation:
Our services: Analysis, examination and quality assurance of IT processes and internal controls. Support in implementing and optimizing internal control systems.
Our solution:
§ Missing documentation (emergency planning, authorization concept, etc.) § Critical authorizations are granted too extensively § Data protection requirements are not complied with § Failure of IT services or business processes as well as missing emergency planning § Lack of strategic alignment of IT § Outdated and heterogeneous IT
§ Analysis of IT processes and evaluation of existing IT controls against the background of individual process risks and their possible effect on the company‘s IT and process organization § Tool-based analysis of authorizations § Certificate of adequacy and effectiveness of service-oriented controls (e.g. control reports in accordance with IDW PS 951) § Evaluation of development environment and program functions for software certification und IDW PS 880 § Support in preparing important documentation like IT emergency planning, process documentation and IT process and control documentation.
Benefit for the customer: § IT is designed for the needs of business processes § Increased confidence and reliability of IT § Appropriate sustainable monitoring methods and tools § Avoidance of function separation conflicts and critical access § Minimization of company risks
Archiving and Document Management
Customer situation:
Our services: Support in implementing and verifying auditproof archiving processes and systems, in particular in regard to compliance with special tax requirements
Our solutions: § A new electronic archiving system will be implemented (or an old one will be replaced) § Electronic invoices shall be archived in accordance with the legal (especially tax) requirements § Paper documents will be scanned electronically and then destroyed § Review and approval of business transactions is recorded in an electronical work flow § „All“ documents are retained because no archiving concept exists
§ Support in identifying the documents to be retained, defining retention periods and determining retention type § Quality assurance and establishment of archiving concepts and procedure documentation § Support in designing the internal control system for a proper archiving procedure. § Review and certification of an electronic archiving system in compliance with IDS RS FAIT 3 and GoBD
Benefit for the customer: § Cost savings due to an electronic archive instead of paper receipts § Optimization of operational procedures § Compliance with legal retention obligations (HGB, AO, GoB, GoBD, GoBS, GdPdU, etc.)
Internal Auditing
Customer situation:
Our services: Establishment and optimization of internal audit departments and support or takeover of internal audits
Our solution:
§ The customer has no own internal audit department
§ Investigation of core processes of the internal audit department (e.g. organization, work practices, methods, reporting) and verification of compliance with professional standards
§ Internal audit department exists but has no sufficient capacity or lack of know-how in specific topics (e.g. SAP skills)
§ Support in assessment and improvement of efficiency and effectiveness of ICS (internal control system)
§ Special audits in specific cases are to be performed (e.g. in case of embezzlement)
§ Independent execution of financial, operational and compliance audits and support of employees in the internal audit department in audits.
§ Process-independent monitoring is demanded by the control entities and is seen as substantial element of good company management
Benefit for the customer: § Build-up of a functional internal auditing complying with company-specific requirements and internationally accepted standards § Increasing acceptance and effectiveness of internal auditing § Implementation of an effective ICS by processindependent monitoring
Data analysis
Customer situation:
Our services: Performance of data analyses, where the data is directly extracted from the processing system, analyzed, compared and evaluated (tool-based)
Our solution: § Risk-oriented determination and definition of indicators for analysis § Verification of effectiveness of the internal control system
§ Determination of required data for data analyses
§ Verification whether operational processes are handled in compliance with company-internal provisions (e.g. approval levels
§ Provision of required data for data analyses (data selection)
§ Control of accounting or processing errors or incorrect system configuration § Examination of unusual transactions and those outside of ordinary business operations § Control of adequate authorization assignment
§ Check of received data in regard to accuracy, completeness, coverage of the necessary period etc. § Preparation of data for data analyses and performance of data analyses § Interpretation of the result of performed analyses
Benefit for the customer: § High data volumes can be systematically investigated § Data analyses can be repeated automatically § Data analyses can be tailored to the issues to be investigated § Increase in data quality § Compliance safety
Your contacts
HLB Dr. Schumacher & Partner GmbH An der Apostelkirche 4 48143 Münster Telefon: +49 (0) 251/2808-0 Telefax: +49 (0) 251/2808-280 Wolf Achim Tönnes Partner WP / StB / RA
[email protected] www.schumacher-partner.de
Daniel Onnebrink Senior Manager CISA
