AuditBoard

We began our journey using AuditBoard to manage our global sox control owner testing program. It is much simpler and cleaner that our prior tool and was easy for control owners to learn the tool and perform testing more efficiency and effectively. We also use it for the quarterly disclosure surveys that used to be done in a separate tool. Our audits are managed in OpsAudit that provides a single source for our audit plan and status of related projects. We use issues module coupled with WorkStream survey to track issues to completion with a fully automated process. All with single sign on providing seamless access and relatively easy admin effort to manage users.

We use AuditBoard for both operational audits and sox compliance. It is used by a large group within the group organization for streamlining sox certifications and testing. The internal audit team uses ops audit to document audit testing. This product has made our groups so much more efficient and gave us a great opportunity to collaborate very easily with the business units we audit.

The Internal Audit Department uses it to document testing for Ops Audit and SOX. We also use Workstream to send out quarterly certifications to all of our SOX control owners and to send out our identified issues for Management Action Plan responses and to document SOC 1 reviews. The IT department uses CrossComply to monitor Compliance Frameworks (ISO and PCI).

We used AuditBoard for our controls testing, controls certifications, document requests, and operational audits. It was used by the internal audit department and the accounting department. AuditBoard allowed us to have everything in one location. It gave control owners and management more insight into what their controls are, what issues were discovered, and gaps in the controls process.

AuditBoard is used by Internal Audit and Risk Management. It addresses all operational audits and risk & controls of the Bank.

AuditBoard is currently being used by the Internal Audit Department, which uses it to create & house risk assessments, to hold audit work documentation, to create issues and report them via Internal Audit Reports, to document SOX control walkthroughs & testing, for time reporting, as Internal Audit's Standard file repository (procedures, etc.), to survey audit clients for feedback, and to ask control owners to certify their SOX control performance. The Risk Department has also reviewed AuditBoard's system but has not yet chosen to implement it for ERM risk assessments. The Internal Audit Department has allowed examiners and external auditors access to the system in limited form as well.

AuditBoard help keeps our SOX testing more organized. We use it for SOX audit, Ops audit, etc. <br>I don't believe it's used in other department.

The whole organization uses it as a managerial and risk tool. They use it every quarter to certify their controls and report anything that is not working as intended. This addresses the SOC, SOX, and operational risks and allows IA to correct the control language based on the needs of the department and organization.

AuditBoard is used by the Internal Audit department of the company, for Ops audit and SOX program. It helps the control and business owners collaborate with IA to complete the audits and SOX requests.