Chapter 10
Action Plans
Action Plans
In this chapter, we identify and discuss the keys to obtaining focused action plans from the business process owners at the conclusion of the execution phase of the continuous auditing methodology. So much time and effort is spent developing, planning, and executing a detailed continuous auditing program that is it critical to remember to partner with the business process owner to create a specific action plan designed to address the root cause of the exception identified during testing. There is nothing more frustrating, disappointing, and disheartening for an internal audit team than being pushed to complete the continuous auditing work and then not having business unit management held accountable for delivering an action plan focused on the root cause.
If a formal action is not required as part of the continuous auditing methodology, it will be very difficult for the responsible auditor and the internal audit department to develop, implement, and maintain a successful continuous auditing methodology. Even if in the most obvious testing scenarios where the continuous auditing program repeatedly produces negative results, sometimes no formal action plan is developed until the problem is elevated to a senior management level. Although the action plan eventually is developed, no internal audit department wants to have to go to senior management each time it needs a formal action plan to address exceptions.
To ensure that appropriate action plans ...
