How To
Restricting access to clients using CCH Central
CCH Audit Automation
Restricting access to clients using CCH Central
It is possible to restrict user access to audit clients via CCH Central as follows:
- In the Maintenance section of the file drop down menu select Security > Data Security. Under the client heading ensure the company checkbox is ticked - office or department could also be used. Please note once company is ticked it means that users will only be able to view clients linked to that company if they are also linked to that company in their user record unless they have been set up as a team member for the client (see below).
- Create a virtual company (e.g. named Third Party)
- Create an Employee record (e.g. Clive Berry) and ensure they have access to CCH Audit Automation at the appropriate level (e.g. Audit partner)
- In the Employee record select Third Party in the company field
- For those clients you want the user to access add to the client Team in the Responsibility tab and click the Allowed checkbox (do not tick Apply Team Security checkbox) or select the same company in the client record that the user is linked to. If the Allowed column does not display close and relaunch Central.
- In CCH Audit Automation, go to System options in the ribbon
- and click the Apply Central data security checkbox (last option bottom left)
Related documents
Inherent Risk Questions
This document outlines the process for assessing inherent risk in clients through a systematic approach of questions. The system can store up to 99 risk areas, each containing 99 questions, which are assigned point scores for "Yes" and "No" answers. It details steps for editing, adding, and deleting risk areas and questions, including interface navigation and confirmation prompts. Additionally, it emphasizes that once numbers are assigned to risk areas or questions, they cannot be changed. The document serves as a guide for managing inherent risk assessments effectively.
Audit Risks
This document details the functionality of CCH Audit Automation for recording Identified Audit Risks, also referred to as Significant Business Risks. It provides instructions for users to add, edit, and manage risks, including features for maintaining risks for future audits, assessing their significance, and linking them to assertions. The system includes tools for risk assessment, audit response, and documenting conclusions. Other functionalities encompass risk summarization, printing options, and risk linkage across multiple sources, enhancing the audit process's efficiency and accountability.
Default Specific Risk Questions
CCH Audit Automation allows users to define specific risk questions for audit areas, although it's not mandatory. If no specific questions are set, default questions will be used. Users can edit the default questions through the "Specific risk questions" option in the Risk Model section. Up to 99 default questions can be defined, similar to inherent risk questions. The system utilizes a lookup table that combines specific and inherent risks for audits, with editing instructions provided in the manual.
Risk/Sample Selection
This document outlines the concept of audit risk, defined as the likelihood of undetected material errors during an audit. It introduces a risk model used in Audit Automation that requires total audit risk to remain below acceptable levels across various audit areas. The risks are broken down into inherent risk, control risk, and detection risk, with further subdivisions for detection risk. It emphasizes the importance of understanding these concepts to design effective audit procedures and assess risk at different levels. Additionally, it discusses general and control environments, and the calculation of residual risk, alongside a risk scoring system.
Inherent Risks
The document outlines the procedure for addressing inherent risk questions in an audit context. Users can access a dedicated window to view up to 99 risk areas, answer questions, and modify responses as necessary. The system prompts users to validate changes to ensure proper risk assessments. It includes functionalities for viewing prior comments, copying text, and overriding calculated risk levels, emphasizing that auditor judgment is crucial. Comments on overrides must be provided to rationalize any adjustments made. The document serves as a guide for navigating and utilizing the auditing software effectively.