APPENDIX A … OCC INTERNAL AUDIT OUTSOURCING FACTORS AND JLCPA COMPLIANCE STRATEGY

APPENDIX A – FFIEC INTERNAL AUDIT OUTSOURCING FACTORS AND JLCPA COMPLIANCE STRATEGY FFIEC INTERNAL AUDIT BOOKLET JLCPA COMPLIANCE STRATEGY FACTOR Outsourced internal audit reports and All work will be prepared using relevant internal audit work papers should be standards promulgated by the various adequately prepared in accordance with auditing professional associations (AICPA, the audit program and the outsourcing IIA and ISACA). agreement. Work papers should disclose the specific Will be performed in accordance with the program steps, calculations, or other standards promulgated by AICPA, IIA and evidence that supports the procedures and ISACA). conclusions set forth in the outsourced reports. The scope of the outsourced internal audit Procedures will be reviewed with “audit procedures should be adequate regarding liaison” prior to performance and approval the procedures and testing performed, and obtained. If necessary, procedures will be the internal audit manager should approve performed based on a risk-priority basis the process. using guidance from the three professional associations identified above. The institution should revise the scope of Scope of work to be determined by “audit outsourced audit work appropriately when liaison.” JLCPA will recommend changes the institution’s environment, activities, as appropriate. risk exposures, or systems change significantly. The institution should subject the vendor Project will be ...