Informde de Hallazgos de Auditoria
Informde de Hallazgos de Auditoria
Informde de Hallazgos de Auditoria
AUTORES:
Florian Valqui, Esther Abihgail
ASESOR:
Mery Esther Popayan Torres
CHEPÉN – PERÚ
2023
I- CONCEPT
It refers to any deficient and relevant situation that is determined through the application of
audit procedures in the critical areas examined; that, in addition, it is structured according to
its attributes (condition, criteria, cause and effect) and, obviously, is of interest to the audited
organization. A finding is the basis for one or more conclusions, recommendations and
provisions, but these do not constitute part of it. If the findings and conclusions are not clearly
separated, it may be impossible for the reader to understand when the report refers to the
responses given by the interviewees or to the views of the auditor.
CONDITION
They are all deficient situations found by the auditor in relation to an operation, activity or
transaction. It reflects the degree to which the criteria are being achieved or applied. The
condition can be a criterion that is not being fully or partially applied or achieved.
CRITERION
They are the standards or parameters with which the auditor measures the condition, that is,
they are the measurement units that allow the evaluation of the current condition.
• Written provisions (laws, regulations, objectives, policies and goals, plans, manuals,
guidelines, procedures, agreements, circulars, and others).
• Common sense.
• Auditor experience.
• Management indicators.
• Independent expert opinions.
• Prudent business practices.
• Written instructions.
• Administrative experience.
• Generally observed practices.
CAUSE
It is the fundamental reason or reasons why a condition occurs. The reason(s) why the
criterion was not met. It is enough to indicate in the audit report that a certain problem exists
because someone did not meet a criterion, to convince the reader.
• Lack of training.
• Lack of communication.
• Lack of knowledge.
• Negligence or carelessness.
• Inadequate, non-existent, obsolete or impractical standards.
• Conscious decision or instruction to deviate from the criteria.
• •Lack of resources.
• Lack of good judgment or common sense.
• Lack of honesty.
• Failure to notice the problem.
EFFECT
They are the actual or potential adverse results that the auditor obtains when comparing the
condition and the respective criteria. In general, it is represented as the loss of money or in
efficiency and effectiveness, due to the lack of application of the established standards; also
for failure to achieve goals and objectives. For the auditor it is very important to determine the
effects, since they allow him to persuade the administration of the need for a change to
achieve the criterion or goal. It is convenient that, whenever possible, the auditor express in
the report the effects quantified in money or another unit of measure.
LABCELLCOM CIA.LTDA
MANAGEMENT AUDIT
Alcance: del 01 de enero al 31 de diciembre
re de 2013
FINDING SHEET
FINDING 1
Within the Information Security and Privacy Plan of IDEAM A-GI-M002 V2, there is no evidence of website information
security and personal data protection policies in accordance with the provisions of Law 1581 of 2012.
It is recommended to generate an information security policy for the website and personal data protection, in accordance with
the provisions of Law 1581 of 2012 and carry out the respective application and socialization within the entity.
Observation: The head of the computer office informs us that the personal data protection policies are transversal to various
departments of the entity with which the personal data protection guidelines must be established.
FINDING 2
Operational Area 11. According to ANsi/Tia/Eia 568-B, ANsi/Tia/Eia 568-A, EIA / ECA 310E and ISO/IEC 14763-2 Standards
The Rack does not have security measures, there is no labeling in patch cords or network devices, the cabling is
disorganized.
It is recommended to comply with the standardization standard ISO/IEC 14763-2 Good Planning and Installation Practices.
Observation: The computer office inside the survey of the planimetry of the structured cabling, for the construction of a
laboratory where this intervention is included; On the occasion of the postponement of the construction of the laboratory, the
laying of cabling for the operational area 11 was also postponed.
V- FINDING IN AN ENVIRONMENTAL AUDIT EXAMPLE
La
The lack of knowledge regarding these Fines and economic sanctions, The implementation of an
management systems and the lack of serious pollution problems, risks to environmental management
empresa
importance on environmental issues. the health of workers, non- system is suggested, to improve
compliance with environmental procedures, practices and
no
policy. environmental processes. In
addition to maintaining and
cuenta
carrying out the environmental
policy.
con un
sistema
de
gestión
ambiental
The company does not have
an environmental
management system.
BIBLIOGRAFIA