ACL User ConferenceACL User ConferenceNew York CityJune 8th, 2009

New York: Monday, June 8

7:30 a.m. - 8:30 a.m. Breakfast | Registration | Networking

8:30 a.m. - 8:45 a.m. Welcome and Opening Remarks

8:45 a.m. - 9:45 a.m. The Road to Continuous Assurance: A Team's Transition from Audit to Continuous Controls Monitoring

Jason A. Gross, CPA, CIA, CFE, CISA, ACDAVice President Controls Management

Siemens Financial Services 9:45 a.m. - 10:15 a.m. Break | Networking

10:15 a.m. - 11:15 a.m. Gaining Audit Assurance: Continuous Audit Techniques with ACL

David Toussas, CISA, Director IT AuditTiffany & Co.

11:15 a.m. - 12:30 p.m. ACL Impact Award Winner

12:30 p.m. - 1:30 p.m. Lunch | Roundtables | Networking

1:30 p.m. - 3:30 p.m. Workshop: Advanced Techniques to Improve Audit Efficiency

Michael Keiffer, CPA, CIA, CISA, CTA, ACDAACL Certified Master Trainer

Workshop: Continuous Auditing & Monitoring with ACL

Dustin Lewis, CISA, ACDASenior Technology Consultant, ACL

Services Ltd.

3:30 p.m. - 4:00 p.m. Break | Networking

4:00 p.m. - 5:00 p.m. ACL Use it or Lose It: Benchmarking Workshop Facilitated by Steve Biskie, CPA, CITP, CISABest Practices Director, ACL Services Ltd.

5:00 p.m. - 7:00 p.m. Cocktail Reception

The Road to Continuous The Road to Continuous Assurance by Jason GrossAssurance by Jason Gross

Control Management versus Internal Audit◦No longer independent◦Actively participates in the business

decisions◦Become more of the event driver

towards continuous monitoring

In Order To Succeed…In Order To Succeed…

Obtain support & commitment from Audit Committee and Management

Continuous Auditing should complement the Audit Plan

Start small; build from successAutomate/leverage from well-

defined periodic auditsGain reliance by external auditors

and add value

Technology Tools…Technology Tools…Optimize current data analytic

scripts and schedule routines on a ‘continual’ basis’

Obtain direct access to the dataCultivate core team of skilled

auditors using technology for data extraction and analysis

ContinuousContinuous AuditAudit Techniques with Techniques with ACL by David ToussasACL by David ToussasNo little blue box under our

chairsInteresting overview of the

history of the companyThe evolution of using ACL in

their businessOvercoming the

challenges/access to dataGet buy-in

Evolution of ACL at TiffanyEvolution of ACL at Tiffany2001: Created A/P Testing Module in

ACL2003: Initial Attempt at Continuous

Audit2003: Identified Issue in Production

Report2004: Utilized U.S. Sales Data

Warehouse2005: Enhanced Post Void Testing2005: Travel & Entertainment (cash

advances)

Challenges they facedChallenges they facedStaffing

◦Turnover in the SOX-Era has been challenging

◦Limited resources with technical skillsSustainability

◦Data exists on various platforms and databases

◦Majority of time spent developing/running queries

◦Staff is uncomfortable downloading/importing

What they did about itWhat they did about itNew Goals

◦Centralized repository for data gathering◦Consistently refresh data◦Ability to control changes to ACL Modules◦Expand Continuous Audit into

International Retail◦Identify additional projects

Implement◦Upgrade ACL Server to ACL

AuditExchange

Impact Award WinnersImpact Award WinnersManuel Coello - Stanley Works

◦North American Winner◦Continuous Monitoring using ACL and

their successes

David T. Miod - United States Air force◦Overall winner◦Cost reductions in the millions if not

billion+

Manuel Coello - Stanley Works

Smorgageboard of ACL Smorgageboard of ACL UsesUsesTravel Improvement EventContracts Improvement EventGPC Improvement EventSupply Improvement EventAVPOL Improvement EventReimbursements Improvement

Event

All with dollar savings in the millions

Continuous Auditing and Continuous Auditing and AssuranceAssuranceBy Dustin Lewis – ACLDo ad hoc first then automateEarly wins/high risk areasAnalytic Essentials (for Audit Exchange

Only)Run VerifyComment tricks

◦ End of blank line ends commentsMaking font bigger (or smaller)Example of cleaning up filesAll commands in upper caseUse of permanent variables (_status)Set Debug?

Benchmarking WorkshopBenchmarking WorkshopUse it or lose itUse it or lose itMust not have been too eventful for meEach table had ½ hour to come up with

ACL application ideas that was unique½ hour to share our ideasMine was duplicate reporting – first

thing facilitator said was no dup reporting ideas since everyone has one.

Our table wasn’t pickedLast item on the agenda before cocktail

hour