hello everybody i'm matt mays senior technical consultant for cerna today we're going to explore the audit management application part of the integrated risk management program on the servicenow platform servicenow's integrated risk management program is made up of five applications policy and compliance risk management audit management vendor risk management and business continuity management these five products can work together or standalone depending on the needs and maturity of your organization's irm team let's look at an overview of audit management audit management on the servicenow platform enables organizations to prioritize streamline and enhance their internal audits servicenow helps organizations accomplish this by integrating their audits with the other irm applications on the servicenow platform with audit management organizations are able to ingest controls and all the related policies issues tasks and other related information scope audits from existing data select test plans and get sign off on audit plans test controls using automated indicators and testing templates complete field work using robust tasking to manage audit activities across teams automate the organization's audit review and approval process and finally automatically generate reports detailing audit activities and outcomes let's take a look at how servicenow's audit management program can help your irm team from the audit engagement workbench our audit engagement managers are able to see an overview of all of their ongoing audits including audits that have passed their end dates by clicking on the link two engagements have exceeded their planned end dates our audit manager is able to see all of the audit engagements that have passed their end date our audit engagement managers are also able to click into an audit and see specific details on it when our audit manager clicks the q3 sap financials change management audit he is shown the details for this audit engagement scrolling down if our audit manager clicks the edit button a pop-up is displayed that shows the details of the engagement including the name who it's assigned to a description the objectives for the audit the dates of the audit and who the auditor and approvers are towards the bottom of the screen we see the related lists in the entities list we see sap financial accounting this is the entity which is in scope for this audit when we scope an entity into an audit we get the other risk and compliance information in the system if we click the risks tab we see the risks that apply to sap financial accounting and our auditor is able to evaluate these as part of the audit process if we click the controls tab we see the controls that apply to sap financial accounting we also see their status to the far right if we click the test plans tab we see the test plans that are available for us for this audit on the indicator results tab we see indicator results that have been performed during the audit period the audit tasks tab is a list of all of the tasks that are going to be performed during this audit in addition to doing control tests our auditors can also perform tasks such as activities interviews and walk-throughs for example we could set up an activity to do a kick-off meeting for this audit when we click the control test we're presented with the control test form at the top we see the chevrons indicating the life cycle of the control test our control tests initially start off in an open state when our auditors begin work they move to work in progress when our auditors have finished work they move to review and then finally to a closed state on the control test form we can see what engagement our control belongs to who it's assigned to what control it is testing and what test plan is associated with this control test we also get the control effectiveness of the control on the schedule tab we see the plan start date and planned end date we also see that the actual start date and actual end date are blank once work begins on this control those dates will be populated let's move this control test to work in progress to see now that our control test has been moved to a work in progress state we see that the actual start date is populated on the design tab we test if the control was designed properly to achieve the control objective in this case we'll say that it was and we'll mark it effective on the operational test tab we test if the control is operating effectively to achieve the control objective in this case we'll say that it's not when the control test closes we see that an issue has been generated to document the finding of this control test back on the audit engagement workbench we can see all of the issues that have been generated for this audit engagement let's take a look at our actual audit engagement record at the top we see that our audits have a life cycle they start off in scope where we provide the audit details determine the audit schedule and determine what entities are in scope for the audit from scope our audit moves to validate where the approvers approve the scope of the audit once approved we move to field work where our auditors perform the actual field work of the audit after field work we move to awaiting approval where our audit approvers approve the audit results after approval our audit moves to either follow up or closed if we have outstanding audit findings we stay in a follow-up state until those findings are resolved and then finally our audit closes at the end of the audit on the form field if we click on type we see that our audits can have numerous types and that the audit can be assigned to both internal and external audit teams we don't have to limit ourselves to just internal audit teams either for example the it team could use an engagement to conduct an internal assessment of it systems on the schedule tab we see that we have the engagement plan start and end date these are our estimates of when we're going to start and end our engagement our engagement also tracks the actual start and actual end date this can be valuable information for reporting under the field work date section we see that we have additional planned and actual dates for our field work this enables us to track our actual build work inside the overall engagement on the results tab we're able to record our results and opinion of our audit our result options are satisfactory adequate or inadequate finally on the report tab we have the information that is used to generate the audit report at the end of the audit the knowledge base field captures the knowledge base that the audit report will be stored in the report template field is the template that will be used to generate the audit report and the kb article field is the actual article that is generated from the template here we see an example of a published audit report from a completed engagement this is an example of an out of the box template these templates can be customized to meet your organization's needs thank you for watching audit management in the servicenow platform presented by cerna like this video and subscribe to our channel for more great integrated risk management content for more information or to contact us see the information on the screen