Development and Experimentation of a Software Tool for Identifying High Risk Spreadsheets for Auditing

TL;DR

This paper introduces 'Risk Calculator', a new Excel add-in that automatically assesses spreadsheet risk levels to prioritize auditing efforts, saving resources and improving organizational risk management.

Contribution

The paper presents a novel software tool that automatically evaluates spreadsheet risks and helps focus auditing on high-risk spreadsheets, addressing a gap in existing mitigation methods.

Findings

Successfully developed and tested the 'Risk Calculator' tool

Demonstrated effective identification of high-risk spreadsheets

Showed potential for reducing auditing time and costs

Abstract

Heavy use of spreadsheets by organisations bears many potential risks such as errors, ambiguity, data loss, duplication, and fraud. In this paper these risks are briefly outlined along with their available mitigation methods such as: documentation, centralisation, auditing and user training. However, because of the large quantities of spreadsheets used in organisations, applying these methods on all spreadsheets is impossible. This fact is considered as a deficiency in these methods, a gap which is addressed in this paper. In this paper a new software tool for managing spreadsheets and identifying the risk levels they include is proposed, developed and tested. As an add-in for Microsoft Excel application, "Risk Calculator" can automatically collect and record spreadsheet properties in an inventory database and assign risk scores based on their importance, use and complexity. Consequently, auditing processes can be targeted to high risk spreadsheets. Such a method saves time, effort, and money.