|
Internal Audit Office |
|
|
ELECTRONIC DATA PROCESSING |
| Focus / Chart of Accounts/ Policies and Procedures / Home Page |
| Home Page (UNCW) / ACUA Control Assessment Tool / System Security Reports / Flowchart |
| 1. Focus Reports | |
| Focus is a report writer language which enables you to extract data from files and output in easy-to-read reports. Your FRS, SIS, HRS, and/or ADS System account must have Focus reporting capability to run Focus routines against that System. A Focus routine is the set of commands which tell the program which file to read, fields to select, which fields to print, the sort criteria, format to print in, and calculations, if any, that should be performed. Focus will be on your Main Menu if you have the capability; highlight and enter to get to the Focus Menu. | |
| Focus routines may be created from scratch or existing routines modified using copy and edit. Focus routines can be saved for repeated use. Each routine is assigned a number, and you should update your Focus menu with the description of each routine by the respective number. | |
| If creating from scratch, the field-names (i.e, ACCT_DGT1_SLO) and field descriptions (i.e., FS010) can be obtained from a printed version of the Focus Master File Descriptions, for the particular system, or by calling up applicable screens, cursoring to the field, and requesting Help. The best source is Focus Master File Descriptions, because these are organized by File, and generally, most of your requests will be built around fields in a single file. Using a combination of tools may get you the best results. Examples of files in FRS: | |
| FSFILE - Subsidiary Ledger File | |
| FVHIFL - Vendor/Voucher History File | |
| POFILE - PO File | |
| In the Internal Audit filing cabinet, under computer resources, there is a handbook for writing Focus routines that explains the most commonly used commands and the report writing rules. Classes are also offered in the Office of Information Technology. | |
| To run or execute a Focus routine, you highlight Submit and enter on the Focus Menu. You will be presented with options. It is suggested if you are running a large file, that you select Tonight, so as not to slow down the system or force long wait times for persons needing short reports. There's a selection for where to print, and again, if it is a large file you should select the SYSPRINT queue for the high speed printer in the Office of Information Technology. As an option, you can send to a nonprint file, which you can then download into a database or spreadsheet to analyze or manipulate the data further. | |
| If you do not have Focus capability on your account, you should make your request to the appropriate office that approves accounts for that System. If you want to copy a routine someone else is using, the owner of that report must give permission to the Office of Information Technology to have that routine copied to your Focus menu. | |
| 2. Chart of Accounts/Administrative Policies and Procedures | |
| Either of these can be accessed through the Internet. To view the Chart of Accounts, go to https://busaff.uncw.edu/coa/chrtmenu.htm. To view the university's administrative policies & procedures, go to http://www.uncw.edu/sp/admproc/. | |
| 3. Home Page | |
| The Internal Audit home page will link to internet sites that are useful for researching best practices, audit programs, internal control questionnaires, and audit techniques. We also maintain the questionnaires for the self assessment of the university, whcih is a review completed annually for the Office of the State Controller. | |
| 4. Home Page (UNCW) | |
| UNCW has a home page which links to the home pages of various university departments. These resources connect you to areas of the university, are in continual development, and highlight operations or people of interest to a broad constituency. | |
| 5. ACUA Control Assessment Tool (CAT) | |
| The ACUA Controls Assessment Tool is a software package designed to facilitate assessments of internal controls by department or function. This software is PC-based, as well as web-based on the ACUA website. The Transaction Cycles of the assessment are Organization and Management; Budgeting, Accounting, and Reporting; Purchasing, Contracting and Leasing; Expenditures (Other than Payroll); Personnel and Payroll; Inventory; Moveable Equipment; Revenues and Transfers of Expenses; Cash Receipts; Petty Cash; Unit Accounts Receivable Systems; Administration of Gifts, Contracts, and Grants; and Electronic Data Processing. Each cycle has a group of questions and suggested policies. You can complete the answers of the departments as you conduct audits or reviews in these areas. | |
| The software is designed so you can manage the data (compile it) and update the data every time you re-visit an area without having to gather or input the information again. Questions can be added or changed to meet the institution's specific needs. It also prints out summaries and reports. Because much of this is duplicative of the State Auditors' Self Assessment questionnaires, no real data has been loaded into this program. Future uses may be contemplated. | |
| 6. System Security Reports | |
| The System Security Report is a batch routine. As indicated by its name, it is an SCT "System" report. On Security Report ZBA115, the select is By Screen. You can designate the System you are running the report for-FRS, SIS, HRS or ADS. The report outputs all operator ID's with access to the screen(s) you list (that fit that particular system). This is useful when you are auditing a department or activity that you know has routine access to FERPA data. The screens containing student grades, for example, could be listed under the header. When the report runs, all access-write or inquiry-is presented in the report so you can review in relation to known job function. | |
| The report ZBA110 is for reviewing all operators and their access rights. This report lists, for every operator, the screens to which this operator has write access or inquiry access. Explicit denials would also show on this report. This report is currently run by the Office of Information Technology. Sorts may be changed. | |
| I =
inquiry A = write
access D = denied access System reads in sequence. It reads line one, two, three, and so on. A3**=write access to all 300 screens. If lines D381 & D382 precede the A3** line, then the person has write access to all 300 except, 381, 382. However, if these D lines are placed after A3**, system has already given access to all and therefore D lines are not being read. |
|
| 7. Flowchart | |
| The allCLEAR software program designs and generates flowcharts. An explanation of a basic flowchart follows: | |
| What it is: A drawing of the steps of a work process to show their sequence. | |
| What can it be used for: | |
|
|
| How to do it: The main elements of simple flowchart are: | |
| Statement Start Stop Direction of Flow If Choices Case | |
|
|
| Keep in Mind: | |
|
|
Back to Audit Manual - Table of Contents