InFission's approach to management testing

InFission utilizes management testing to support the internal audit, compliance, and Enterprise Risk Management programs.

The internal auditor team uses the findings management testing to develop the scope for the independent audit plan. A control self-assessment questionnaire is distributed to the management that identifies the status of controls effectiveness over the audit cycle. The auditors only facilitate this process and never participate in responding to this survey to preserve their independence. While the auditors do not rely solely on the results of the survey to determine the effectiveness of the controls, the results of the survey are used to determine the scope of the audit plan to focus on significant process changes, emerging risks, organizational changes, and other issues reported by management. Auditors also use the results of the control self-assessment to determine the qualitative assessment of controls such as the complexity...