FISCAM presents a methodology for performing info. system (IS) control audits of governmental entities in accordance with professional standards. FISCAM is designed to be used on financial and performance audits and attestation engagements. The methodology in the FISCAM incorp. the following: (1) A top-down, risk-based approach that considers materiality and significance in determining audit procedures; (2) Evaluation of entitywide controls and their effect on audit risk; (3) Evaluation of general controls and their pervasive impact on bus. process controls; (4) Evaluation of security mgmt. at all levels; (5) Control hierarchy to evaluate IS control weaknesses; (6) Groupings of control categories consistent with the nature of the risk. Illus.

Policymakers and program managers are continually seeking ways to improve accountability in achieving an entity's mission. A key factor in improving accountability in achieving an entity's mission is to implement an effective internal control system. An effective internal control system helps an entity adapt to shifting environments, evolving demands, changing risks, and new priorities. As programs change and entities strive to improve operational processes and implement new technology, management continually evaluates its internal control system so that it is effective and updated when necessary. Section 3512 (c) and (d) of Title 31 of the United States Code (commonly known as the Federal Managers? Financial Integrity Act (FMFIA)) requires the Comptroller General to issue standards for internal control in the federal government.

In July 2001, the U.S. General Accounting Office (GAO) and the President's Council on Integrity and Efficiency (PCIE) issued the GAO/PCIE Financial Audit Manual (FAM). The FAM provides guidance for financial audits conducted by the Inspector General community, GAO, and their contractors. The FAM is a key part in enhancing accountability over taxpayer-provided resources. GAO and the PCIE are committed to keeping the FAM current and intend to prepare updates as needed. With this goal in mind, a GAO/PCIE task force prepared this update to volume II of the FAM, which provides tools to assist the auditor in complying with audit standards.