1. Examples of approaches to management testing of operating effectiveness of controls

Requirements:

1. Please identify the type of control for each of the control listed below (for instance, preventive / detective; entity level/process level; key control /secondary control, etc.)

2. Please provide possible management testing approach for each of the control listed below.

Control to be tested:

1. As part of the organizations risk assessment process, formal forecasts are prepared and updated during the year to reflect changes in conditions, estimates, or current knowledge

2. The organization has a documented and approved disaster recovery plan, which includes off-site storage controlled by a 3rd party vendor

3. The organization has a policy requiring that a revenue recognition review performed by the revenue accountant before revenue from complex contracts is recorded.

4. Surveys of internal users of financial reports are conducted to obtain information on user satisfaction with the reliability and timeliness of the reporting from all executives.