Modul de formare-Managementul resurselor financiare - uefiscdi

3. Obtained for analysis: organizational structure, operating regulations, records of
items, and written proceedings of the structure or activity audited, etc.;
4. Identify responsibilities people;
5. Study the information system of the audited structure;
6. Perform analytical procedures of the audited structure or activity performance in order
to analyze the risk and quality management (if it is one of the objectives of the mission);
Procedure for identification and risk analysis
Purpose: The procedure aims to identify specific risk structure or activity audited. Assessment
of internal control within the structure or activity audited.
Foundation: The quantification of risk is done for: the nature and specific activity or function
audited; quality of internal control, severity of direct and indirect consequences of the risk; risk
probability.
Procedure: The auditors perform specific activities: 1. Make, based on the collected
information, list of auditable activities, 2. For each auditable activity are identified the
elementary tasks 3. Identify risks for each elementary task 4. Specify criteria for risk assessment
5. Assess the identified risks; 6. Establish the audited objectives as a result of the identified
risks. 7. Indicate the specific devices for each task (objectives, resources, information system),
8. Prepare the Risk Analysis Table.
Head of Internal Audit Department
9. Organizes a meeting to review the audit objectives, risks and their assessment
criteria. Where appropriate, he/she can order the reassessment of objectives and risks identified;
10. Approves the Risk Analysis Table.
The Auditors
11. Contain the Risk Analysis Table file in the internal audit mission.
Table of risk analysis include the following categories: Risk, Risk classification, Probability,
impact, Consequence description, Existing policy, Classification of residual risk, Strategies
needed.
References
Guidance on value for money (VFM) strategies and reporting, HEFCE, 1 August 2008
Summary of common issues we find in our data audit work în institutions, HESES08: Higher
Education Students Early Statistics Survey 2008-09 (HEFCE 2008/37), available at
www.hefce.ac.uk under Publications. - Guidance on audit committees, october 2008.pdf
HEFCE (2006), Model Financial Memorandum between HEFCE and institutions.
http://www.hefce.ac.uk/pubs/hefce/2006/06_24/
HEFCE (2007) Funding higher education in England: How HEFCE allocates its funds.
http://www.hefce.ac.uk/pubs/hefce/2007/07_20/
Revised Turnbull Guidance October 2005.pdf
OMFP number 946/2005 for the approval of the Internal control code, including the
management/internal control standards at public entities developed management control
systems
the Law on public internal audit number 672/2002
OMFP number 38/2003 for approval of the Methodological Norms for applying the law
on public internal audit
OMFP number 1702/2005 for approval the Rules for the organization and pursuit of counselling
activity conducted by internal auditors in public entities.
58