|
|
Application for Risk Management Reporting in SAP
Uhlíř, Michal ; Rychlý, Marek (referee) ; Zendulka, Jaroslav (advisor)
Hlavním cílem této práce je vyvinout aplikaci sloužící pro reportování správy rizik za použití nejnovějších technologií, které nabízí firma SAP. V první části je nastíněn koncept problematiky správy rizik, jsou vysvětleny klíčové pojmy a zmíněny některé problémy z této oblasti, se kterými se společnosti v dnešní době potýkají. Dále jsou vyjmenována a srovnána některá z komplexních softwarových řešení, které jsou momentálně dostupné na trhu. Práce pokračuje popisem technologií, které jsou využity při tvorbě výsledné aplikace. Proces vývoje zahrnoval analýzu stávajícího datového modelu, tvorbu nové datové struktury a její validaci a návrh samotného uživatelského prostředí pro zobrazování těchto dat. Výsledná aplikace umožňuje získávat správná data z databáze a zobrazovat je odpovídajícím způsobem.
|
|
|
Application for Risk Management Reporting in SAP
Uhlíř, Michal ; Rychlý, Marek (referee) ; Zendulka, Jaroslav (advisor)
Hlavním cílem této práce je vyvinout aplikaci sloužící pro reportování správy rizik za použití nejnovějších technologií, které nabízí firma SAP. V první části je nastíněn koncept problematiky správy rizik, jsou vysvětleny klíčové pojmy a zmíněny některé problémy z této oblasti, se kterými se společnosti v dnešní době potýkají. Dále jsou vyjmenována a srovnána některá z komplexních softwarových řešení, které jsou momentálně dostupné na trhu. Práce pokračuje popisem technologií, které jsou využity při tvorbě výsledné aplikace. Proces vývoje zahrnoval analýzu stávajícího datového modelu, tvorbu nové datové struktury a její validaci a návrh samotného uživatelského prostředí pro zobrazování těchto dat. Výsledná aplikace umožňuje získávat správná data z databáze a zobrazovat je odpovídajícím způsobem.
|
|
|
Impact of regulations ISO 27001 and SOX on information security management in enterprises
Bystrianska, Lucia ; Bruckner, Tomáš (advisor) ; Tomčová, Zuzana (referee)
The master thesis has analytical character and focuses on information security issues in enterprises. The mail goal of this thesis is to evaluate the impact of implemented standard ISO/IEC 27001 and regulation by American law SOX to overall information security. In order to preform the analysis, two medium-sized companies from the segment of services were selected: the first one with ISO/IEC 27001 certification and the second one regulated by SOX. The structure of the thesis contributes gradually with its steps to meet the goal. The first three chapters provide a theoretical basis for the analysis of information security. They contain a summary of key processes and tools essential for ensuring the information security and are based on the best practices included within the latest standards and methodologies and on practical experience. These chapters provide the basis for an evaluation guidance including criteria groups and defined variants of implemented security, which is described in the fourth chapter. The analysis of information security and the impact of regulations is part of the fifth chapter of this document. The sixth chapter contains final assessment and comparison of the impact, which the regulations have on information security of the selected companies. The final chapter summarizes and evaluates the results achieved with regards to the goal.
|
|
|
Internal control system
Pavésková, Ivana ; Müllerová, Libuše (advisor) ; Černý, Václav (referee)
This thesis is focused on internal control system. The aim of this thesis is to analyse the development and elements of internal control system, and then demonstrate the possible form of the internal control system in practice. The thesis is divided into two parts -- theoretical and practical. The beginning of the theoretical part is devoted to characteristics of internal controls and their relation to internal control, attention is also paid to economic crimes which the internal control system helps prevent. Next part deals with the development of approach to the internal control system. The main part of the theoretical part is devoted to the elements of internal control system -- control environment, information system, control procedures, risk and internal audit. The theoretical part is completed with the internal guidelines, which is the written expression of the internal control system. The last part is devoted to the evaluation of the internal control system by the external auditor. The practical part demonstrates internal control system in anonymous production company, in detail analysis its interesting parts.
|
|
|
Controling system in the organization
Salák, Ondřej ; Svatá, Vlasta (advisor) ; Žák, Jaromír (referee)
The aim of this work is to create a framework to classify internal controls due to the management level in which they appear, and to apply this framework to internal controls in a small organization. First, the reader is briefly introduced to the definition of control, types of control and the structure of control. Another part is a description of the established framework for the classification and subdivision of controls in terms of the levels of management. Each level of control is also clearly accompanied by the examples from the above documents. In the end, this system is applied to an organization that has almost no internal control system yet, and the framework of the controls at the individual levels is introduced.
|
|
|
The organization of controls in the specific area of shared service centre
Sedmíková, Tereza ; Pelák, Jiří (advisor) ; Kašpar, Jan (referee)
This diploma thesis is a practical excursion into the organization of controls in a particular shared service centre. The work deals with the company relation to the section 302 and 404 of Sarbanes-Oxley Act and describes the company's internal control system according to the COSO "Integrated framework - Internal control" issued in 1992. More detailed description is provided within the company's fraud risk assessment process and within yearly testing process of control activities in order to meet section 404 of Sarbanes-Oxley Act. The specifics of external audit when performing audit in shared service centre, the shared service centre influence to foreign accounting entities from internal control system perspective are the other topics taken in consideration. Finally, there are highlighted benefits of automated system for processing travelling expenses in relation to the COSO "Integrated framework - Internal control" issued in 1992 and in relation to necessary assurances requested by U.S. SEC for the purpose of preparing financial statements under U.S. GAAP. The company's relation to anti-corruption laws (such as the FCPA) intersect in the analytical section, whose purpose is to find internal control gaps in the department processing travel reports in terms of their content and process.
|
|
|
SOX Implementation
Kučerová, Lucie ; Pelák, Jiří (advisor) ; Gyén, Juraj (referee)
The thesis deals with the Sarbanes -- Oxley Act of 2002 (SOX). Reasons leading to its acceptance and the consequences are analysed. The costs and benefits of SOX implementation are compared from the individual and global view. The process of implementation is explained on the example of purchasing and account payable.
|
guest ::
