Abstract
In this paper we report on our experiences of applying business process mining in a real business context. The context for the application is using process mining for the purpose of internal auditing of a procurement cycle in a large multinational financial institution. One of the targeted outcomes of an internal audit is often the reporting on internal controls over financial reporting (ICFR), since this reporting is mandatory for Sarbanes-Oxley regulated organisations. Our process mining analyses resulted in more identified issues concerning ICFR than the traditional auditing approach. Issues that were identified using process mining analysis concerned violations of the segregation of duties principle, payments without approval, and violations of company specific internal procedures.
This is a preview of subscription content, log in via an institution.
Buying options
Tax calculation will be finalised at checkout
Purchases are for personal use only
Learn about institutional subscriptionsPreview
Unable to display preview. Download preview PDF.
References
Masli, A., Peters, G.F., Richardson, V.J., Sanchez, J.M.: Examining the potential benefits of internal control monitoring technology. Accounting Review 85(3), 1001–1034
van der Aalst, W.: Business process management center (2011), http://bpmcenter.org/
van der Aalst, W.M.P., Reijers, H.A., Weijters, A.J.M.M., van Dongen, B.F., Alves de Medeiros, A.K., Song, M., Verbeek, H.M.W.: Business process mining: An industrial application. Information Systems 32(5), 713–732
van der Aalst, W., Weijters, T., Maruster, L.: Workflow mining: Discovering process models from event logs. IEEE Transactions on Knowledge and Data Engineering 16(9), 1128–1142
Günther, C.W., van der Aalst, W.M.P.: Fuzzy mining – adaptive process simplification based on multi-perspective metrics. In: Alonso, G., Dadam, P., Rosemann, M. (eds.) BPM 2007. LNCS, vol. 4714, pp. 328–343. Springer, Heidelberg (2007)
Kopp, L.S., O’Donnell, E.: The influence of a business-process focus on category knowledge and internal control evaluation. Accounting Organizations and Society 30(5), 423–434
Bierstaker, J.L., Hunton, J.E., Thibodeau, J.C.: Do client-prepared internal control documentation and business process flowcharts help or hinder an auditor’s ability to identify missing controls? Auditing: A Journal of Practice and Theory 28(1), 79–94
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2011 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Jans, M., Depaire, B., Vanhoof, K. (2011). Does Process Mining Add to Internal Auditing? An Experience Report. In: Halpin, T., et al. Enterprise, Business-Process and Information Systems Modeling. BPMDS EMMSAD 2011 2011. Lecture Notes in Business Information Processing, vol 81. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-21759-3_3
Download citation
DOI: https://doi.org/10.1007/978-3-642-21759-3_3
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-21758-6
Online ISBN: 978-3-642-21759-3
eBook Packages: Computer ScienceComputer Science (R0)