[转载] 审计缺位

cccxie

Exactly not, but be careful of your wording, as your information may be used by other BIG 4 competitors, haha....

wangderek

Thank you for your reminding. I do not care. Because those are what we try to show off.

But you really know a lot about our practice.

cccxie

good thinking, do you have some SWOT anaylsis of your Shanghai market, how is the other BIG 3 marketing share?

wangderek

Ｎｏ ｓｕｃｈ ｒｅｓｅａｒｃｈ． Ａｓ ｍｙ ｐｏｉｎｔ ｏｆ ｖｉｅｗ， ｂｉｇ ４ ｄｅｄｉｃａｔｅ ｍｏｓｔ ｏｆ ｔｈｅｉｒ ａｔｔｅｎｔｉｏｎ ｔｏ ｅｎｌａｒｇｅ ｔｈｅ ｍａｒｋｅｔ ｉｎｓｔｅａｄ ｏｆ ｃｏｍｐｅｔｉｎｇ ｗｉｔｈ ｅａｃｈ ｏｔｈｅｒ． Ｉｎ ｃｏｎｓｕｌｔｉｎｇ ｍａｒｋｅｔ， ｗｅ ａｒｅ ａｌｌ ｗｉｎｎｅｒｓ．Ｗｅ ｓｕｐｐｌｙ ｖａｒｉｏｕｓ ｋｉｎｄｓ ｏｆ ｓｅｒｖｉｃｅｓ ｔｏ ｃｕｓｔｏｍｅｒｓ ｂａｓｉｃａｌｌｙ ｂａｓｅｄ ｏｎ ｔｈｅｉｒ ｎｅｅｄｓ． Ｍａｙｂｅ ｗｅ ｊｕｓｔ ｈｅｌｐ ｃｏｕｎｔ ｔｈｅ ｓｔｏｃｋ． Ｄｅｌｏｉｔｔｅ ｉｓ ｒｅａｌｌｙ ａ ｌｅａｄｉｎｇ ｓｅｒｖｉｃｅ ｐｒｏｖｉｄｅｒ，ｅｓｐｅｃｉａｌｌｙ ｉｎ ＩＴ ｃｏｎｓｕｌｔｉｎｇ ｂｅａｔｉｎｇ ｏｔｈｅｒ ｂｉｇ ４． Ｔｈｅ ｍｅｔｈｏｄｏｌｏｇｙ ｏｆ Ｄｅｌｏｉｔｔｅ ｉｓ ｔｏ ｄｏ ｔｈｅ ｔｈｉｎｇｓ ｂｅｓｔ． Ｉｔ ｍｉｇｈｔ ｎｏｔ ｂｅ ｇｏｏｄ ａｔ ｐｒｏｍｏｔｉｎｇ ｍａｒｋｅｔ， ｒｅｗａｒｄｉｎｇｐｅｏｐｌｅ，ｏｒ ｇｅｔｔｉｎｇ ｍｏｒｅ ｍｏｎｅｙ ｆｒｏｍ ｃｌｉｅｎｔｓ， ｂｕｔ ｉｔ ｒｅａｌｌｙ ｈｏｌｄｓ ｔｈｅ ｍｏｓｔ ａｄｖａｎｃｅｄ ｔｅｃｈｎｏｌｏｇｙ． Ｗｅ ｈａｖｅ ｓｏ ｍａｎｙ ｐｒｏｐｒｉｅｔａｒｙ ｔｏｏｌｓ． Ｗｈｅｎ Ａｎｄｅｒｓｏｎ ｉｓ ｓｔｉｌｌ ｍａｋｉｎｇ ｉｔｓ ｗｏｒｋ ｐａｐｅｒ ｍａｎｕａｌｌｙ， ｗｅ ｈａｖｅ ｕｓｅｄ ＡＳ／２， ａ ｖｅｒｙ ｐｏｗｅｒｆｕｌ ａｕｄｉｔ ｔｏｏｌ ｄｅｓｉｇｎｅｄ ｂｙ Ｍｉｃｒｏｓｏｆｔ ｅｘｃｌｕｓｉｖｅｌｙ ｆｏｒ ｕｓ． Ｗｈｉｌｅ ｗｅ ｃａｎ ｎｏｔ ｍａｋｅ ａｓ ｍｕｃｈ ｍｏｎｅｙ ａｓ Ａｎｄｅｒｓｏｎ． Ｙｏｕ ｃａｎ ａｌｓｏ ｆｉｎｄ ｔｈａｔ Ｄｅｌｏｉｔｔｅ ｉｓ ｔｈｅ ｏｎｌｙ Ｂｉｇ ４ ｔｈａｔ ｄｏｅｓ ｎｏｔ ｈａｖｅ ｓｃａｎｄａｌ． Ｉｆ ｙｏｕ ｗａｎｔ ｔｏ ｌｅａｒｎ ｓｏｍｅｔｈｉｎｇ， Ｄｅｌｏｉｔｔｅ ｉｓ ａ ｇｏｏｄ ｐｌａｃｅ． Ｉｆ ｙｏｕ ｗａｎｔ ｔｏ ｅａｒｎ ｍｏｒｅ ｍｏｎｅｙ， ｙｏｕ ｈａｄ ｂｅｔｔｅｒ ｔｕｒｎ ｔｏ ｏｔｈｅｒ Ｂｉｇ ４．
Ｖｅｒｙ ｓｏｏｎ ｗｅ ｗｉｌｌ ｔａｋｅ ａｎｏｔｈｅｒ ｌｅａｄｉｎｇ ｐｌａｃｅ ｉｎ ｍａｉｎｌａｎｄ． Ｔｈａｔ ｉｓ ｅＢａｎｋｉｎｇ ｓｅｃｕｒｉｔｙ ｃｅｒｔｉｆｉｃａｔｅ． Ｉ ａｍ ｐｌｅａｓｅｄ ｔｏ ｂｅ ｉｎｖｏｌｖｅｄ．Ｔｈｅ ｎｅｘｔ ｔｗｏ ｗｅｅｋｓ ｗｉｌｌ ｂｅ ｖｅｒｙ ｂｕｓｙ ｗｅｅｋｓ． Ｔｈａｔ ｉｓ．

cccxie

take care of your company, and the informaiton is really confidential, any leaking information can be used by competitors. But have u ever knowed your mentioned certification rule is still in draft?

Once more, nice to talk with u here. as mentioned, you are newly joint DDT? good consultant!

wangderek

Thank you once again. Maybe you do not know. The handover in Big 4 is amazingly frequent. The staff is flowing among these big accounting firms. Therefore, there is nearly no secret among us. For example, I know exactly the salary of a certain level in each Big 4, which might be top confidential for each one. Sometime, I can get the ppt file our competitor just presented to its potential client. I do know how to reduce such risks. I once make related suggestion to OA department for controling employee termination and remote access when I was just a junior.Finally OA accepted it.

tttkoo

I am totally confused that how could a PAPER CISA audit realy Information System? The guy who dressed famous brand suit, equiped an IBM (International Big Mouse? joke)laptop but never design a network or do troubleshooting, could he find any risk? I knew a Big 4 guy even doesn't know where the IP could be config! Well, I feel it is funny to play w/IS audit, just draft a story and drive the rat to a place you want he goes! Because everyone knows IS audit Methodology! Remember that leaving a small weakness or rat can't write his audit report.

wangderek

Yes, a very big part of guys working for big 4 are just like what you describe. As a IS auditor, you should know so many things, operating system, application system, ERP, database, work flow, network infrastructure, firewall, router. Especially ERP, it seems not possible to know half of them. We are too young to know them all. You are the same. But we have tools and our own procedures. The tools are so powerful that they can generate very detailed reports without your professional knowledge. Our procedures are so detailed. We can have findings and draw conclusions with ease. We also have very good accounting knowledge and english capability. We work day and night and earn only a little more than workers in other companies.