We can rapidly identify and evaluate your critical spreadsheets. Using our Excel spreadsheet audit toolkit we can quickly identify all of your spreadsheets and provide a risk-based evaluation.
The first step to managing spreadsheet risk is to identify the volume and nature of spreadsheets in use. This is a relatively short process as we can rapidly identify and evaluate these critical spreadsheets using our automated excel toolkit. We can quickly obtain data around the volume, size and characteristics of the spreadsheets which are in use in the business.
Clients are often surprised at the sheer number and complexity of the spreadsheets in use, which itself is an indicator of risk. Issues such as version control, duplication, security and data integrity are then brought out at the spreadsheet evaluation stage.
We can evaluate your spreadsheet risk exposure by carrying out our risk assessment and detailed review. Typically the first part of this involves a discussion around the need, size and business criticality of spreadsheet models.
For example, spreadsheets carrying personal data in an HR department and external reporting numbers in a finance department need to be very tightly controlled, but for different reasons and the controls and security that need to be applied are equally different. We would then audit some key spreadsheets characteristics using the excel toolkit.
Some of the issues we would identify as part of this review are:
We can help you put in place and roll out a formal governance process for continued spreadsheet risk management.
Typically this would be in the form of a set of standards around spreadheet structure, control and security within your business. This would then be agreed by all relevant parties and could form part of an internal audit review to ensure ongoing compliance.
For some sensitive applications this governance framework is of increasing interest to external auditors, particularly speciifc to some industries such as pharmaceutical and Life and Pensions where there is a high level of external scrutiny and regulation.