1 of 32

Introduction to Baseline Assessment of Internal Control System (BAICS)

2 of 32

BAICS Day 1- Sessions 1 and 2

  • At the end of the session, the participants will be able to gain knowledge on the overall concept of BAICS, its methodology and the various templates to be utilized during the workshop

3 of 32

PGIAM 2020: Internal Audit Key Processes/Activities

4 of 32

IC Framework(ICSPPS)

5 of 32

6 of 32

Monitoring

Ongoing

Separate

(IAS and other reviews)

7 of 32

What is Baseline Assessment of Internal Control System(BAICS)?

  • BAICS is a process of gathering, analysing, interpreting information about existing internal controls in an organization to achieve improvement of systems and procedures towards achieving strategic goals.

8 of 32

BAICS�

  • The internal auditors get familiarized with the agency as an organization, its operation, programs and processes, and more importantly, the existing internal control system

9 of 32

BAICS

BAICS is carried out by performing activities such as: administering internal control questionnaires/checklists; verifying results; using flowchart/ narrative notes; and conducting walkthrough and test of controls.

10 of 32

Objectives of BAICS

Get familiar with the organization’s operations

Identify and document the five (5) components of the internal control system of all programs and projects of the organization;

Review key processes on operations (OPS), support to operations (STO), and general administration and support (GAS);

Review controls on key processes of OPS, STO and GAS; and

Gather sufficient information on potential audit areas to be included in the strategic plan

11 of 32

Familiarization with the Organization’s Operations

Gathering and Analyzing information on the organization’s mandate,objectives, strategies, operating and support systems,relevant laws, rules and regulations and organizational and sectoral performance

12 of 32

Documenting the Five components of ICS

To obtain the understanding of the agency’s ICS in the context of the public sector, the Internal Auditors should be able to identify and document the five components of ICS

Identify and document the five components of ICS

13 of 32

Review of Key processes and Performance in the Operating System/Support System

Objective of the review is to document controls in key processes of operations within the organization that are critical to the achievement of the control objectives. Criteria for the selection of critical processes can include the ff:

1.A process with an output that is an input to a major final output

2. A process that makes up significant control procedures; and

3. A process where the financial value of inputs are high.

Review key control processes and performance of operating and support systems

14 of 32

Different tools and techniques to be utilized in gathering information

The critical operational/support processes may be documented and analyzed using flowcharts and walkthrough.

A narrative note shall be added to be more descriptive of the process

Gather sufficient information on potential audit areas to be included in the strategic plan

15 of 32

BAICS FLOW DIAGRAM (Revised PGIAM 2020)

16 of 32

17 of 32

Activities in the conduct of the Baseline assessment

Accomplishing AICD

Administering ICQ/ICC and verifying the results

Using flowchart/narrative notes

Conducting walkthrough

Accomplishing SCA/TOC

CCWS

-Control Universe

    • SOB
    • IR/BAR

18 of 32

BAICS Procedures

ORGANIZATION LEVEL

Gather relevant data

1

Document Controls

2

Administer ICC

3

Validate results

4

Summarize Observations

5

Prepare IR/BAR

6

19 of 32

BAICS Procedures

OPERATION LEVEL

Gather relevant data

1

Document Controls

2

Review FC/NP

3

Walkthrough 1 trans.

4

Administer ICC

5

Validate “NOs”

6

20 of 32

BAICS Procedures

OPERATION LEVEL

TOC “YES”

7

Review Performance

8

Summarize Observations

9

Review Other Reports

10

Build Control Universe

11

Prepare IR/BAR

12

21 of 32

Tools and templates

22 of 32

Agency Internal Control Document

23 of 32

AICD

24 of 32

25 of 32

AICD

26 of 32

AICD

27 of 32

28 of 32

Interim Report

  • Contents:

Gaps or control deficiencies/breakdowns found out after conducting a flowchart, preparing a narrative notes and conducting a walkthrough

These gaps should be subjected to root cause analysis and the preliminary recommendations should form part of the interim report.

Gaps or control deficiencies/breakdowns noted during the documentation of the components of the ICS and the key processes in the operating and support systems

29 of 32

Control Universe (CU)

  • The CU is a list of all auditable areas which shall be an input to the BAR included in the strategic plan and will be prioritized in the formulation of the annual work plan.

30 of 32

Baseline Assessment Report (BAR)

  • Summarizes the gaps and control deficiencies/breakdowns resulting from the baseline assessment of the ICS.

  • The BAR also includes the Control Universe and the results of the review of oversight bodies and international development partners

31 of 32

32 of 32

Service with a Heart,

INTERNAL AUDIT OFFICE

Ground Floor Dome, PUP A. Mabini Campus, Anonas Street, Sta. Mesa, Manila Trunk Line: 5335-1787 loc. 326/388

Email: internalaudit@pup.edu.ph