Yellow cabs waiting for green light on the crossroad of streets of New York City during sunny summer daytime

Comment Letter - GAO's proposal to update the methodology for assessing design, implementation and operating effectiveness of information system controls

Overview

In our comment letter, we support the efforts of the Government Accountability Office (GAO) to update the Federal Information System Controls Audit Manual (FISCAM) to reflect changes in relevant auditing standards, guidance, control criteria and technology since the last revision in 2009. We suggest certain clarifications to enhance the proposed guidance and reduce potential diversity in implementation. FISCAM provides the methodology to assess the design, implementation and operating effectiveness of controls over information systems in audits of federal and governmental entities.

Download PDF

PDF (271 KB)

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.