1. Operational Auditing--Fall 2000 Control Self Assessment (CSA) 4 Methodology 4 Review and Identification –Key business objectives –Related risks –Mitigating controls

2. Operational Auditing--Fall 2000 CSA-History 4 Introduced by Gulf Canada in 1987 4 Gulf used facilitated meetings

3. Operational Auditing--Fall 2000 Facilitated Meetings 4 Management and staff participate through interviews and polling 4 Objectives 4 Risks 4 Processes 4 Soft and/or informal controls

4. Operational Auditing--Fall 2000 General Methodology 4 Shared process 4 Assessment of internal controls 4 Evaluation of risks 4 Development of action plans 4 Assess the likelihood of achieving objectives 4 SJSU simulation

5. Operational Auditing--Fall 2000 General Approaches 4 Facilitated meetings--group workshops 4 Questionnaires--yes/no answers 4 Management analysis--self studies

6. Operational Auditing--Fall 2000 Uses 4 Self analysis for risk* 4 Selection of audit areas* 4 Internal control review* 4 Special projects 4 Soft control analysis * alternatives to the traditional approach to the I/A process

7. Operational Auditing--Fall 2000 Benefits 4 Increases I/A scope 4 Target review of high risk areas 4 Increases the effectiveness of corrective action 4 Builds team-oriented relationships