MOCK AUDITS
A Mock Audit is an "internal" evaluation that mirrors the principles of a formal audit. Our mock audit replicates the methods and substance of a typical compliance examination at the same level of investigation that is anticipated from the vendor. CORE employs a three-phased approach: 1) Data Collection and Analysis, 2) Fieldwork, and 3) Reporting.
We begin the engagement by taking the time to thoroughly understand your license agreement(s) because it is the license that provides the framework around which the parties' relationship is formed. We then send an initial Information Request listing documents and responses to be provided by the client. The requests focus on all areas of the business and enable us to familiarize ourselves with your contractual, operational, and financial obligations in advance of the examination. We perform an in-depth analysis of the data and documents that we receive, identify any additional information or documentation needed, and provide an indication of what needs to be available for the auditor's examination and testing during the on-site review and how much time may be required. During the on-site meeting we conduct interviews with relevant personnel and observe demonstrations of internal processes and business activities. Essentially, we walk through the flow of Vendor Data throughout your organization: where it is stored, who has access to it, how it is accessed internally and externally, how it is used and for what purpose, and what processes and procedures are in place to protect it. During the review we provide feedback in real time. Once the examination is complete, we discuss our findings with you and prepare a written report at your request.