Home          About          Links          Credits          DazNokiaFunnies

HOW TO DEAL WITH A QiCA SUSPECT

Ah, yes, QiCA - The Qualification in Computer Audit, the IIA 2 year professional accrediation for people who are into computers and now also want to explore the control framework and risk profiles associated with them in order for an organisation to seek assurance in those risks and controls to contribute to the economic, efficient and effective delivery of goods and services. So, beware Internal Auditors, for these "QiCA suspects", as we shall now call them, also have knowledge beyond their underlying techno smokescreen.
Therefore - they must be dealt with........in a special way.

1...IDENTIFY THE QiCA SUSPECT!

Difficult to spot initially but engage them in a techie conversation and when the acronyms come flying you know you may be part way there already. Now try a trick question like "I always use a domestic dial-in connection to the network when using my laptop at home!" and stand back. If you inadverentantly mentioned that you also connect to the net using ADSL Broadband, either take three steps back or leave the room completely. If you find yourself hit with more controls than a Concorde Flightdeck, you've found your QiCA suspect.

2...WHERE TO FIND THE QiCA SUSPECT!

IT department (obvious, as more than likely they already work there), Starbucks (on their 8th expresso of the day, reading strategies, business plans and project documentation to get a complete view of the current risk profile facing IT and its associated practices within the organisation...oh, and IT week magazine for the broadband bits), the local Train Station (with a copy of RAIL magazine as well as IT week and the Thursday IT supplement in the Guardian, for the jobs they apply for....and never get). One place you will rarely find them is actually in an Internal Audit department - thats because many before us have successfully kept them banished to their IT departments (where they belong - I hear you cry!)

3...WHY IS THE QiCA SUSPECT TO BE AVOIDED?

Many reasons, the most important of all is that no matter how hard you try, they claim they know more about the organisation than you (and rather annoyingly...they actually do). They have wild and crazy ideas on how they could eat your risk assessment model up for breakfast, shake up your audit planning, make maverick moves on scoping and somehow at the end, come up with innovative and positive recommendations in reports, improving client relationships and increase the overall profile of the Internal Audit department.
THE SOLUTION IS SIMPLE.....DON'T GIVE THEM THE CHANCE........

.....TO BE CONCLUDED SHORTLY!

Well, after I've consulted my attorney anyway!!!!!

The views represented are those of the author and not, necessarily those of DazNokiaFun or any of the editorial team involved in the site. Any references in the text are fictional and for entertainment purposes. Any similarity to people or events, living or dead is purely co-incidental.
Thanks
Daz Nokia Fun

Hosted by www.Geocities.ws