Implementing continuous control monitoring for audit purposes using a complex event processing environment

摘要

A method of providing True Continuous Control Monitoring (CCM) of business processes for audit purposes is provided herein. The method includes the following steps: consolidating data from multiple sources, in case the transactional data is located in more than one source, to a single self contained and comprehensive source; identifying, in the single data source, data elements that are required for detection and reporting for each audit rule; translating and streaming, in case required, the transactions data into events, so that every change in a transaction is immediately reflected and identifiable; eliminating duplicate events for the same single transaction; applying the event processing engine to the events, based on event audit patterns derived from audit rules, possibly entered by non-programmers; and generating alert data in audit-style notation, to be reported back to the system, based on alert notifications derived from the event processing engine.