What you don’t know can hurt you

Taking a leaf out of the audit book for gaining valuable insights from data.

The rise of big data comes as no surprise to auditors, who have long analyzed massive volumes of data to gain insight into the workings of organizations, writes John Verver.

If you’re in an agency leadership role, you are no doubt aware of the unprecedented challenges of controlling costs while simultaneously creating value for the taxpaying public.

Regardless of department, chances are that you are under immense pressure to demonstrate outstanding performance -- not only in terms of efficiency and effectiveness, but also in managing public money with competency and accountability. To navigate this era of reduced resources, you’re expected to focus relentlessly on operational efficiency, cost effectiveness, productivity, service and innovation. At the same time, scrutiny of public agencies is at an all-time high. For example, the Department of Defense is now statutorily required to withstand scrutiny by becoming audit ready by 2017.

The spirit of audit readiness is fast becoming best practice for government organizations around the world -- to drive down costs, improve operating efficiencies, make better decisions, protect taxpayer’s money and run a better department. Today’s public-sector managers and leaders are expected to know their business processes, identify and close the loop on red flags, transparently document and manage workflow, and be able to collaborate with other stakeholders in order to be fully accountable to the taxpaying public and the lawmakers that represent them.

Big data and “truth is in the transactions”

While these lists of challenges may be well known, what is less widely recognized is the role that modern audit techniques, based on data analysis, can play in addressing operational performance issues. The rise of Big Data – as an approach to understanding customer trends and business opportunities – is getting serious attention, particularly in the private sector. What is also not well recognized is that auditors have for years been analyzing massive volumes of data in order to gain insight into the effectiveness of controls and the integrity of entire populations of transactions.

Organizations today collect a broader variety of data at a greater velocity than ever before. The operation of any agency relies on effective processing of often millions or billions of transactions. These include not only traditional accounting transactions -- such as procurement, payments, payroll, travel & entertainment, and purchase cards -- but also data and transactions deep within business processes and controls where information is exchanged between critical systems and applications.

The opportunity to use data to evaluate business processes, identify risks and fix processes is not new to auditors or others in government oversight functions. The opportunity now is to expand this use of technology more widely throughout government operations. Putting a magnifying glass over transaction data (and the controls that manage that data) through the use of analytic monitoring allows managers and process owners to identify fraud, errors, abuse and inefficiency -- before auditors and compliance specialists are involved.

A data-driven approach to audit, risk management and compliance provides answers from three perspectives: historical, current and future. Risk and control data analysis supports dynamic, risk-focused planning and decision making -- all based on the premise that the “truth is in the transactions.” In other words, by examining every transaction and testing from a variety of perspectives, it is quite realistic to develop a quantified and verifiable understanding of the integrity and compliance of an entire business process.  

Transaction monitoring analytics can also combine detailed analysis of every transaction with overall statistical and trend analysis to help agencies answer questions such as:

  • What happened and why?
  • Where is the problem, and what actions do I need to take to solve it?
  •  What will happen if these trends continue?
  • What’s the best/worst/most likely to happen next?

And perhaps most importantly:

  • What actions should be taken to get optimal results?

Spinning transaction data into gold and the limitations of controls

It is not uncommon to hear an argument that a well-designed and well-implemented computer application should have all the right controls, checks and balances built into the system so that bad things simply cannot happen. This may seem like a reasonable theory, but of course in practice, no control system is infallible – at least, not if it is also going to be cost effective and involve human interactions.  

The challenge for many public sector functional areas is to find that right balance of control and efficiency. Too much control and nothing gets done efficiently. Too little and the risks of fraud, error and abuse run rampant. On the other hand, by monitoring transactions as they occur -- or shortly afterward -- it is realistic to achieve a factual understanding of the extent of risk that a problem has occurred, together with the details of red-flag transactions that must be addressed. 

We live in an age when technology and computer systems are increasingly pervasive, and yet fewer and fewer people really understand how they work. By spinning data analysis into golden insight, and then applying that information to the assessment of controls, federal leaders can move beyond treating the computer as a black box and start to do the following:

  • Self-scrutinize and assure audit readiness.
  • Improve efficiency – doing more with less.
  • Identify and respond to risk more effectively.
  • Improve transparency and public stakeholder interaction.
  • Adapt to changes in the way people/employees create workarounds and adjust their processes when they know they’re being monitored.

So, where are the typical risks? Examples of inherent controls in core business operations that, if not properly managed and monitored, can endanger agencies and drain taxpayer funds include contract non-compliance, payroll errors and abuse, misuse of purchase cards, duplicate vendor payments, tax fraud and benefits fraud. All of these can contribute to significant losses and decrease the public’s confidence in government efficiency and accountability.

To get started in terms of identifying and mitigating these risks, your audit team can be the key to the design and implementation of a purpose-built risk and control analytics strategy, which will support complex and value-added testing, issue management and long-term sustainability.

Aligning the implementation of analytics tools with the planning process and overall strategic objectives will help ensure the most bang for your buck, so to speak. Success comes from applying technology across broad financial, operational, and business systems. By combining specialized data analysis software with management’s responsibility to monitor risk and controls, forward-thinking agencies can transform data, as well as risk, into financial and operational improvement and opportunity.

X
This website uses cookies to enhance user experience and to analyze performance and traffic on our website. We also share information about your use of our site with our social media, advertising and analytics partners. Learn More / Do Not Sell My Personal Information
Accept Cookies
X
Cookie Preferences Cookie List

Do Not Sell My Personal Information

When you visit our website, we store cookies on your browser to collect information. The information collected might relate to you, your preferences or your device, and is mostly used to make the site work as you expect it to and to provide a more personalized web experience. However, you can choose not to allow certain types of cookies, which may impact your experience of the site and the services we are able to offer. Click on the different category headings to find out more and change our default settings according to your preference. You cannot opt-out of our First Party Strictly Necessary Cookies as they are deployed in order to ensure the proper functioning of our website (such as prompting the cookie banner and remembering your settings, to log into your account, to redirect you when you log out, etc.). For more information about the First and Third Party Cookies used please follow this link.

Allow All Cookies

Manage Consent Preferences

Strictly Necessary Cookies - Always Active

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Sale of Personal Data, Targeting & Social Media Cookies

Under the California Consumer Privacy Act, you have the right to opt-out of the sale of your personal information to third parties. These cookies collect information for analytics and to personalize your experience with targeted ads. You may exercise your right to opt out of the sale of personal information by using this toggle switch. If you opt out we will not be able to offer you personalised ads and will not hand over your personal information to any third parties. Additionally, you may contact our legal department for further clarification about your rights as a California consumer by using this Exercise My Rights link

If you have enabled privacy controls on your browser (such as a plugin), we have to take that as a valid request to opt-out. Therefore we would not be able to track your activity through the web. This may affect our ability to personalize ads according to your preferences.

Targeting cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

Social media cookies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies you may not be able to use or see these sharing tools.

If you want to opt out of all of our lead reports and lists, please submit a privacy request at our Do Not Sell page.

Save Settings
Cookie Preferences Cookie List

Cookie List

A cookie is a small piece of data (text file) that a website – when visited by a user – asks your browser to store on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies – which are cookies from a domain different than the domain of the website you are visiting – for our advertising and marketing efforts. More specifically, we use cookies and other tracking technologies for the following purposes:

Strictly Necessary Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Functional Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Performance Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Sale of Personal Data

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.

Social Media Cookies

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.

Targeting Cookies

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.