1. INTOSAI Working Group on Public Debt Evaluation on Information Systems Related to Public Debt Management Coordination: Brazilian SAI Vilnius, June 9-10, 2011

2. OBJECTIVE To help the WGPD develop a guidance regarding the audit of Public Debt Information Systems (PDIS) that can be useful for all the INTOSAI community, through a Roadmap

3. OBJECT ROADMAP Audit of operation flows and data stored in a PDIS and its impacts in the system, covering: - Investigation of Debt Office structure - General and Operational Controls

4. OBJECT – Operation Flows Negotiation -Loans -Auctions AdministrationMobilizationDebt Service -Loans -Debt Securities -Debt Reorganization -General Agreements -Loan drawings -Debt Securities subscriptions -Loans -Debt Securities Report -Standard Reports -User-defined -Data Validation Analysis -Financial Indicators -Debt Portfolio -Debt Sustainability LIFE CYCLE

5. METHODOLOGY Source materials (main documents): -ISSAI 5410 Guidance for Planning and Conducting an Audit of Internal Controls of Public Debt -ISSAI 5440 Guidance for Conducting a Public Debt Audit – Substantive Tests -IT Audit Guidelines (Asosai/Sept,2003) -IDI e-Learning Course on Auditing Public Debt Management Knowledge about PDIS - DMFAS System presentation

6. SCOPE Public Debt Information System Debt Office operation flows related to debt securities, bank loans, foreign governments or international and multilateral bodies loans

7. STRUCTURE OF THE ROADMAP PLANNING (UNDERSTANDING) TESTING REPPORTING

8. STRUCTURE OF THE ROADMAP Part 1 – Planning (Understanding) Gaining an overall understanding of: - the system’s related operation flows; - how the public debt information system is organized; - composition of the public debt; - technological tools (hardware, software) - how the physical documents of the operations are stored

9. STRUCTURE OF THE ROADMAP Part 1 – Planning (Understanding) How to execute it? -Process Mapping of the PDIS (operation flows) Trade; Cash flows; Buying, selling, forgiveness, reschedule, and other recordings; Physical and logical controls Accountancy related (recording/reporting)

10. STRUCTURE OF THE ROADMAP Part 2 – Testing To determine if the internal controls are operating effectively. CAREFUL ALL THE TIME Compliance according to applicable laws and regulations

11. STRUCTURE OF THE ROADMAP Part 2 – Testing General Controls including: -Segregation of duties; -Physical controls (access/environmental) -Logical access controls

12. STRUCTURE OF THE ROADMAP Part 2 – Testing Operational Controls (data validation) related to: -Reliability of the debt database; -Errors found in the public debt records; -Correction this errors found;

13. STRUCTURE OF THE ROADMAP Part 3 – Reporting (standard) To communicate: -audit objectives, scope and methodology -findings -conclusions -recommendations (or determinations)

14. NEXT STEPS -To develop 3 parts - To conduct an audit of the Brazilian Information Public Debt System (understanding) Are the scope and the structure proper? Any participation is welcome! semag1dt@tcu.gov.br