UCF ID: 01195 |
Control Type: Process or Activity |
Status: Live |
Supporting and supported controls
This control directly supports:
- • Review external auditor outsourcing contracts and engagement letters. [UCF Control ID 01189]
There are no supporting controls.
Authority documents complied with:
FFIEC IT Examination Handbook – Audit, August 2003, Pg 22, Exam Tier I Obj 11.2; EU 8th Directive (European SOX), Art 27
Banking and Finance Guidance
The external auditor contract should include the location of internal audit reports and work papers and should specify the period of time the work papers must be kept. [Pg 22, Exam Tier I Obj 11.2, FFIEC IT Examination Handbook – Audit, August 2003]
EU Guidance
When an audit of a consolidated group of accounts is undertaken, the group auditor must review and maintain documentation of the audit work performed by all auditors or audit firms. The group auditor must retain copies or have unrestricted access to all the information and reports of each auditor or audit firm. [Art 27, EU 8th Directive (European SOX)]
Copyright 2005-2009 Unified Compliance Framework™. All rights reserved.