An effective audit plan starts with understanding of the client's business risks. Though business risk assessment is a required component of audit risk assessment (ISA 315), there is little guidance regarding the best format for documenting business risks to support audit risk assessment; as a...

The Sarbanes-Oxley Act (SOX) mandates the assessment of internal controls over financial reporting and many organizations are using diagrams to express their internal control processes. While educators regularly stress the effectiveness of diagrammatic representation of process information over...