TACUA 2010 TeamMate Presentation

advertisement
TACUA 2010
TEAMMATE EWP R9 ENHANCEMENTS,
IMPLMENTATION BEST PRACTICES,
AND LESSONS LEARNED
April 8, 2010
TeamMate EWP R9 Enhancements
2
Key Functionality
 Use of TeamMate Modules
 Centralized vs. Distributed EWP projects
 Native Support of Risks and Controls
 EWP Replication Process
 Other Items
TACUA Conference 2010
April 8, 2010
Reconsider Use of CCH TeamMate Modules
3
*
 R9 has more tightly integrated the modules making working practices
more streamlined and efficient when all modules are used together
 Introduction of Risk Based Auditing functionality requires the use of
TeamAdmin, TeamStore, TeamRisk, TeamMate EWP and
TeamCentral to fully benefit from this functionality
The Greatest Efficiency Gain:
Assessed risks and controls are automatically
added to EWP projects for testing and are
instantly reportable in TeamCentral.
The Greatest Effectiveness Gain:
Immediate compliance with IIA Standards to
demonstrate that risks scored during your risk
assessment have been tested during audit
work performed.
TACUA Conference 2010
April 8, 2010
TeamMate EWP R9 Enhancements
4
Centralized vs. Distributed EWP Projects
Centralized Model
 EWP projects stored in a central database (SQL, Oracle)
 Explorer tabs pointed to central database
 Explorer tabs filter to show assigned projects (via login
information)
Distributed Model
 Distributed model will be supported
 Master projects will be stored as MS Access databases
 Certain functionality not extended to this model
TACUA Conference 2010
April 8, 2010
Centralized vs Distributed Databases
5

Centralized is the term used when EWP project files are initiated and stored in the same
database as TeamSchedule, TeamRisk, TeamStore and TeamCentral data.
EWP
TeamSchedule
TeamRisk
TeamAdmin
Desktop
Suite
Database
TeamCentral
Reporting
TeamSchedule Web
TeamRisk Web
TEC
Web Server Portal
Work
papers
SQL or Oracle Server
• Highly recommended for medium to large organizations
• Highest performance, data integrity and security
• Enhanced suite-wide reporting features
• Workpapers stored in the backend database or option to store in file system
• Web server also used for replication
TACUA Conference 2010
April 8, 2010
Centralized vs Distributed Databases *
6

‘Distributed’ is the term used that most closely represents how you use TeamMate
EWP today. EWP project files are stored as separate MS Access databases on a file
share. Creating and Sending are still functions required to share data with the
global database.
EWP
MS-Access Databases
TeamSchedule
TeamRisk
TeamAdmin
Desktop
TACUA Conference 2010
TeamCentral
Reporting
TeamSchedule Web
TeamRisk Web
TeamMate TEC
Work
papers
Windows Server
Web Server
Suite
Database
SQL Server or Oracle
April 8, 2010
Centralized vs Distributed
7
Feature/ Function
Centralized
Distributed
Reporting on:
• Procedures & Scorecards
• Risks & Controls
• Coaching Notes
Reporting on all these elements is possible
since the data is centralized
Reporting is not possible since these
elements are not contained in the
Send process
360 Reports can be used to
create post-project reports on
current issue status
Since TeamMate EWP has access to the
issues at all times, implementation
actions, revised dates and implementation
dates are available to the rich 360 reports
TeamMate EWP does not have access
to TeamCentral data. Therefore,
post-project reports are not available
Data changes made via
TeamRisk, TeamSchedule, TEC,
TeamCentral and TeamAdmin
are seen immediately
By removing the XML exchange process
to create and send to TC, data is always
real-time
XML exchange is still required and
TeamMate EWP is not updated once
created
Better TeamMate EWP
performance
SQL and Oracle are more robust
databases and application servers are not
required for performance only reasons
MS Access has many of the same
performance limitations as BDE.
SQL Express is slightly better
Manage large TeamMate EWP
projects
SQL and Oracle have no size limitations
on TeamMate EWP projects
MS Access has a 2GB limit. SQL
Express has a 4GB limit
Users will be asked to sign on to the
database - not each TeamMate EWP
project
Users will still be required to log into
each TeamMate EWP project
separately
Single Sign On
TACUA Conference 2010
April 8, 2010
TeamMate EWP R9 Enhancements
8
Native Support of Risks and Controls
 “New” Risk and Control Viewer in the Navigation Bar. Viewer displays:



Risks and Controls as assessed in TeamRisk
Risks and Controls included in a “Get” from TeamStore
Risks and Controls added directly to the EWP project
 Detailed information displayed for each risk and control, including:





General properties
Descriptions
Pre-project ratings
Post project ratings
Hyperlinks to supporting procedures, issues and coaching
notes
TACUA Conference 2010
09
April 8, 2010
Native Risks & Controls
9
Key Suite Functionality Features
 TeamAdmin contains the set up of Terminology & Categories
 TeamStore maintains the Risk Library
 TeamRisk and EWP pull Objectives, Risks, Controls and their linkages from
the Risk Library
 TeamRisk and EWP can “Add Risk and Control information on the fly”
 360 Reports and TeamCentral report upon Risk & Control data
TACUA Conference 2010
April 8, 2010
TeamAdmin - Terminology & Categories
10
TACUA Conference 2010
April 8, 2010
Risk-based
Risk-basedAudit
AuditApproach
Approach
TeamCentral
Workflow
1. TeamStore contains the Risk Library
(moved from TeamRisk Risk Universe)
2.
8. Reporting
EWP
TeamRisk ‘Get’ risks and controls into
assessment or add them directly
3. Risks and Controls copied from TR
4. Get into Project or Add Manually
3.
4.
TeamRisk passes the risks and controls
with pre-audit scoring to EWP
5. Control  Procedure Linking
7. 360 Reporting
EWP can also “Get” risks and controls
into project or add them directly
5.
Procedures can be linked to controls
6.
EWP performs post-audit risk scoring and
control evaluation for reporting
7.
EWP 360 Reports can be created for
project
8.
TeamCentral suite reporting across
projects
TACUA Conference 2010
6. Post Audit Scoring
TeamRisk
2. Get Into Assessment or SelfAssessment or Add Manually
TeamStore
1. Risk &
Control
Library
11
April 8, 2010
TeamStoreRisk
Risk&&Control
ControlLibrary
Library
TeamStore
12
Control Hierarchy
Ability to link controls to risks and this
relationship is understood by TeamRisk & EWP
TeamMate User Forum 2009
April 8, 2010
TeamMate EWP R9 Enhancements
13
Native Support of Risks and Controls
 Auditor can edit any information in the Risk and Control Viewer within EWP
 Projects created from TeamRisk will show:


“Entity” assessed in TeamRisk
Contact identified as “Entity” owner will be shown as the
Primary Owner in EWP. Alternate owners can be selected.
TeamMate User Forum 2009
April 8, 2010
EWP
EWP
Risk
Risk
and
and
Control
Control
Viewer
Viewer
Risk form on top with label customization and hiding
14
• Risk and Control Relationship Tree
• Entity Breakdown
Control form on bottom w/ full customization
Ability to link to procedures
TACUA Conference 2010
April 8, 2010
Replication Choices
15
 The replication engine was rewritten to address Borland DB
weaknesses, performance issues, reliance on applications
servers and one way replication
 The replication scenario you use today is still available, but
the use of synchronization should replace .tmr/ .tmu usage
where ever possible
 Replication does not care what the source and target
databases are – it works between most combinations of
SQL, SQL Express, Oracle, MS Access *
 A third tier has been added to replication which allows a
replica of a replica to be taken
TACUA Conference 2010
April 8, 2010
Basic Replication
16
 Create a Replica from a ‘Master’
 In the Replica – Sync at any time
 Transport/ Update can still be used if no network connection
EWP
TeamMate Web Portal
download
Replication Web Services
Replica
MS-Access
Suite
Database
tmr
Work
papers
Sync
tmu
send
send
send
Replication Local
Desktop
TACUA Conference 2010
Web Server
SQL Server or Oracle
April 8, 2010
Multi-Tier Replication
17
Primary
Region
Desktop
Web Server
EWP
TeamMate Web Portal
Sync
Replica
MS-Access
(tier 2)
SQL or Oracle Server
Replication Web Services
Work
papers
Headquarters
Suite
Database
Remote
Region
EWP
Replica
MS-Access
(tier 3)
Client-server connection
Work
papers
Sync
Replication Web Services
Web Server
TACUA Conference 2010
Regional
Replica
(tier 2)
SQL or Oracle Server
April 8, 2010
TeamMate EWP R9 Enhancements
18
Other Items
Library files have been renamed to “Templates”
Exceptions have been renamed to “Issues”
Administrator has been renamed to “Project Owner”
Unit has been renamed to “Entity”
The “Create Project” wizard allows you to select an
auditor that is creating the project instead of typing in
name.
 An offline TeamStore can be created from the EWP file.
This creates the TeamStore in an Access database for
portability.





TACUA Conference 2010
April 8, 2010
TeamAdmin
19
 TeamAdmin has become central to the
administration of data in R9
 All user management, terminology, categories, delete
functions, import/ export and many policies have
been moved here and are no longer available from
the Admin menus in the individual modules
 This tool is meant for the TeamMate Champion in
your group and not for general installation
TACUA Conference 2010
April 8, 2010
TeamStores
20
 Prior to R9, TeamStore data could be stored in the global
database, but often was stored in external MS Access
databases on file shares for offline use
 Best Practice for R9 is to convert these TeamStore
databases to the global database and use Offline
TeamStores when working distributed
 Offline TeamStores now contain:







Auditors and contacts
Work programs and work papers
Issue write ups
Risk libraries
Templates
Terminology and categories
Security groups
TACUA Conference 2010
April 8, 2010
Templates
21
Libraries (.tml) have been redesigned to better integrate EWP and TeamStore
sharing and to ensure centralized administration of terminology and categories is
honored
 Libraries have been renamed to ‘Templates’ to better reflect what they do and how
they function
 Templates are no longer stored as separate files – they are contained within the
global database and can be taken offline via Offline TeamStore

TACUA Conference 2010
April 8, 2010
Implementation Best
Practices
GETTING THE MOST FROM THE R9
TEAMMATE SUITE
R9 Readiness – Key Documents to begin with
23
Documents to assist you:
• What’s New in TeamMate R9?
• TeamMate R9 Migration Guide
• CCH TeamMate R9 Services Guide
TACUA Conference 2010
April 8, 2010
TeamMate Implementation:
The Big Picture
 What do you want from TeamMate?
Audit Report
Management
Information
Efficiencies and
Standardization
 When customizing TeamMate keep these objectives in mind!
TACUA Conference 2010
April 8, 2010
How to achieve the most from an R9
Implementation:
 Know the goal
 Take time to make decisions that matter
 Invest the time up-front
 Dedicate appropriate staff
 Provide proper training
TeamMate User Forum 2009
April 8, 2010
CCH TeamMate - Audit Management System
TeamMate User Community
Audit Universe
Risk Assessment
Project and Resource
Scheduling
TeamSchedule Web
TeamRisk Web
Time and Expense
Capture
TEC Admin
Project and
Exception
Tracking
Electronic Working Papers
TeamStore Maintenance
TACUA Conference 2010
April 8, 2010
TeamRisk
Audit
Projects
Start
Audit
Projects
Completion
 Create an
assessment
 Self-Assessments
 Score Risks
 Create audit plan
 Create and release
Projects
TeamSchedule
 Create a plan
 Determine projects
 Schedule Projects
 Schedule resources
 Assign Manager and lead
 Add non-chargeable time
 Release the plan
 Check schedule
 Update risk
assessment
based on audit
TEC
 Complete time and
expense reports
 Approval of timesheets
and expense reports
 Run reports
TeamCentral
 Track Issues
 Track projects
 Update status
EWP
 Create Audit
 Get test from
TeamStore
 Perform test
TeamMate User Forum 2009
 Write Issues
 Run Audit report
 Send Issues to TeamCentral
 Finalize Audit
April 8, 2010
TeamMate Project Timeline Example
TeamMate User Forum 2009
April 8, 2010
TeamMate Protocol Document
 The protocol document defines how your audit group will use TeamMate
 Accessed from within TeamMate via Help | Local Guidance
 Protocol document can include any information relevant to the use of
TeamMate in your organization. Examples include:

Project creation policy

Workflow and/or process map

Project review policy

Scanning policy

Documentation policy

Replication policy

Back-up policy

Who to contact if you forget your password

How and where to archive projects
 Template protocol document template included in your
Welcome e-mail
TACUA Conference 2010
April 8, 2010
TeamMate IT Architecture
TeamMate Suite Physical Tiers
Client Applications:
TeamMate EWP
(TeamImage)
TeamRisk
TeamSchedule
TeamStore
TeamMate TEC Admin
Web Server Applications:
TeamRisk
Web Server Applications:
TeamCentral
TeamSchedule WEB
TeamMate TEC
TACUA Conference 2010
`
File Server Data:
TeamMate EWP
Database Server Data:
TeamRisk
TeamSchedule
TeamStore
TeamMate TEC
TeamCentral
April 8, 2010
Importing or Inputting:
 How will you get your current data into
TeamMate?






Import Resources
Import Projects
Import Risk Universe
Import into TeamStore
Import outstanding issues
Import Audit Universe
 TeamMate Service Offerings
 Assistance in all of the above for a fee.
TACUA Conference 2010
April 8, 2010
TeamMate Installation Best Practices
 Test environment (sandbox)





Initial customization
Pilot project
Protocol on best use of TeamMate
End user training
Move to production

Migration of environment or repeat setup
 Production environment
 Roll out TeamMate to end users
TACUA Conference 2010
April 8, 2010
TeamMate EWP Implementation Steps
 Determining Core Audit Template Elements
 Defining Your Template
 Defining Policies
 Establishing Default Team Members (optional)
 Determining Project Milestones
 Defining Global Tickmarks
 Defining Standard Planning and Wrap-Up
Programs
TACUA Conference 2010
April 8, 2010
TeamMate User Community
Available to all licensed TeamMate users
 News
 Discussion forums
 Downloads
 Documentation
 FAQ’s
 Error messages and resolutions
 Computer based training
 Log enhancement requests
 Example Audit Programs
 Technical Support: 1.800.449.8112 http://www.teammatecommunity.com
TACUA Conference 2010
April 8, 2010
Lessons Learned
35
 IT Support and planning.
 8.2.2 conversion of projects.
 Convert web server, clients, and databases all at once.
 Errors in conversion with duplicate users who were auditors and





contacts.
Redirect tabs to new central database from the old file share
location.
Some minor differences with EWP transition but what the auditor
sees and works with will be basically the same.
All admin for suite through Tmadmin.
Distributed mode (using both Access and SQL)
Sandbox for testing.
TACUA Conference 2010
April 8, 2010
Summary
36
 R9 provides a great opportunity to re-evaluate how you use TeamMate
and your methodology
 By taking advantage of new functions like TeamAdmin centralized
administration, redesigned Templates and Offline TeamStores, you can
better control your data integrity and spend less time making changes in
multiple locations
 Introduction of replication synchronization means that team members are
better aware of work performed in the project by others and assignment
policies in combination with field level conflict handling mean less file
clean up
 By implementing new features like risk based auditing, TeamCentral
reporting and consolidating to a centralized database, you can increase
your department’s efficiency and effectiveness
TACUA Conference 2010
April 8, 2010
TeamMate R9
37
Questions and Answers
TACUA Conference 2010
April 8, 2010
Download