please do not cite without permission of the author. continuous performance and control monitoring at bipop（请不要引用作者的未经许可。）.pdfVIP

Paper given at the European Accounting Information Systems Conference 2002, th Copenhagen Business School, 23-24 April – /ecais. Please do not cite without permission of the author. PRACTICE SUMMARY Continuous Performance and Control Monitoring at BIPOP 1 2 G. Paolo Voarino and Miklos A. Vasarhelyi Over the last decade there has been an increasing interest by the CPA profession of evolving the audit model towards a more continuous / more action driven method of control, review and assurance. Several professional committees (e.g. CICA /AICPA, 1999) has undertaken this endeavor. This practice note describe an approach used at the leading Italian Internet Bank to manage risk and perform continuous process monitoring of its processes. The approach adopted involves the formalization of corporate processes into a large but finite number of micro-processes, their risk assessment, linkage of this risk assessment to a more generic set of risk estimates provided by a major Insurance broker, and the usage of these number for audit planning and process monitoring. In order to provide the necessary up-to-date information to process monitor a layer of measurement was added on top of the corporate ERPS (SAP) to extract a set of measurements that are used for micro-process audit and monitoring. These same methods of extraction have been used to provide Bank of Italy (the banking regulator entity) with a set of reports that are updated on a regular basis. 1 Corporate Auditor and Data Manager, BIPOP Bank. 2 KPMG Peat Marwick Professor of AIS, Rutgers University. 1 Paper given at the European Accounting Information Systems Conference 2002,