Compliance-Appropriate Spreadsheet Testing
نویسنده
چکیده
Sarbanes–Oxley compliance requirements have forced firms to look at their use of spreadsheets in financial reporting. They are finding that they have many spreadsheets and that testing and other formal development disciplines are rare. The literature on spreadsheet errors has shown that without strong controls, most spreadsheets will have material errors; this means that firms that use uncontrolled spreadsheets cannot plausibly claim to be in compliance with Sarbanes–Oxley. This paper looks at a promising control discipline for bringing spreadsheets into Sarbanes–Oxley compliance, namely logic inspection testing following the traditional Fagan (1976) methodology created for software testing.
منابع مشابه
Strategies for Addressing Spreadsheet Compliance Challenges
Most organizations today use spreadsheets in some form or another to support critical business processes. However the financial resources, and developmental rigor dedicated to them are often minor in comparison to other enterprise technology. The increasing focus on achieving regulatory and other forms of compliance over key technology assets has made it clear that organizations must regard spr...
متن کاملToward model-based debugging of spreadsheet programs
Spreadsheet programs are widely used in industrial practice. As they are often developed not by IT professionals but by end users, particular attention has to be paid to quality control and testing and appropriate methods for fault prevention, fault localization and repair for spreadsheet programs have to be developed. In this paper, we propose to apply model-based diagnosis techniques for the ...
متن کاملArchiving: The Overlooked Spreadsheet Risk
This paper maintains that archiving has been overlooked as a key spreadsheet internal control. The case of failed Jamaican commercial banks demonstrates how poor archiving can lead to weaknesses in spreadsheet control that contribute to operational risk. In addition, the Sarbanes-0xley Act contains a number of provisions that require tighter control over the archiving of spreadsheets. To mitiga...
متن کاملQtier-Rapor: Managing Spreadsheet Systems & Improving Corporate Performance, Compliance and Governance
Much of what EUSPRIG discusses is concerned with the integrity of individual spreadsheets. In businesses, interlocking spreadsheets are regularly used to fill functional gaps in core administrative systems. The growth and deployment of such integrated spreadsheet SYSTEMS raises the scale of issues to a whole new level. The correct management of spreadsheet systems is necessary to ensure that th...
متن کاملControls over Spreadsheets for Financial Reporting in Practice
Past studies show that only a small percent of organizations implement and enforce formal rules or informal guidelines for the designing, testing, documenting, using, modifying, sharing and archiving of spreadsheet models. Due to lack of such policies, there has been little research on how companies can effectively govern spreadsheets throughout their life cycle. This paper describes a survey i...
متن کامل