130 likes | 250 Views
Data Mining of Emails to Support Periodic and Continuous Assurance Discussant’s Comments. Bob Cuthbertson, CA ●IT CaseWare IDEA Inc. First reactions. This is a really great subject with intriguing possibilities. First reactions. This is a really great subject with intriguing possibilities
E N D
Data Mining of Emails to Support Periodic and Continuous AssuranceDiscussant’s Comments Bob Cuthbertson, CA●IT CaseWare IDEA Inc.
First reactions • This is a really great subject with intriguing possibilities
First reactions • This is a really great subject with intriguing possibilities • This is completely impossible in an audit context
First reactions • This is a really great subject with intriguing possibilities • This is completely impossible in an audit context • Maybe there’s something here after all
Techniques • Content analysis • Key word • Deception clues • Log analysis • Volume and velocity • Social network analysis
Techniques – work for CA? • Content analysis • Key word √ • Deception clues X • Log analysis • Volume and velocity √ • Social network analysis X
Final Comments • No real discussion of e-mail attachments – same principles and techniques?
Final Comments • No real discussion of e-mail attachments – same principles and techniques? • How authoritative is the research? Stand up in court?
Final Comments • No real discussion of e-mail attachments – same principles and techniques? • How authoritative is the research? Stand up in court? • Behavior changes when monitoring is known
Final Comments • No real discussion of e-mail attachments – same principles and techniques? • How authoritative is the research? Stand up in court? • Behavior changes when monitoring is known • Deception may not indicate fraud – could be just another form of corporate *ss covering
Final Comments • No real discussion of e-mail attachments – same principles and techniques? • How authoritative is the research? Stand up in court? • Behavior changes when monitoring is known • Deception may not indicate fraud – could be just another form of corporate *ss covering • Most of the research was presumably done on English text from English speakers • English text from non-English speakers • Non-English text
Really final comment • What control improvements or additional assurance are provided by e-mail data mining? • e.g. would CA of Enron e-mails turn up any thing that wasn’t already known?
Conclusion • Terrific review of literature and the issues • “Further research” needs a bit of beefing up