American Express Company
Auditing of business controls using analytic control tests

Abstract:

Systems and methods for auditing business controls are disclosed. The system may receive or retrieve data from one or more data sources corresponding to a business control. The system may perform a direct analytic control test (ACT) or an indirect ACT on the data. The system may compare a direct ACT result or an indirect ACT result to an ACT threshold. The ACT threshold may comprise separate direct ACT thresholds and indirect ACT thresholds. Based on the comparison, the system may determine an operating effectiveness of the business control.