An enterprise internal audit information system and method

Abstract

The present invention provides an enterprise internal audit information system and method, and the system includes: a data acquisition module for triggering different audit types according to corresponding audit time intervals, and collecting audit data of the associated system corresponding to the target audit type; an intelligent audit module for triggering the corresponding target audit process based on the audit type and performing intelligent analysis on the audit data to obtain the audit result according to the target audit process; a notification storage module for generating an audit report based on the audit result and sending it to the result receiving end of the corresponding associated system to synchronously generate an audit log for storage; a key monitoring module for performing rectification monitoring on the audit data with abnormal audit results according to a preset rectification monitoring cycle. The present invention combines the risk monitoring of enterprise information with auditing, conducts self-examination and self-correction of the enterprise according to a preset fixed cycle, normalizes the internal audit of the enterprise, reduces external interference, and effectively improves the efficiency of the internal audit of the enterprise and the fairness of the audit.

Description

Technical Field

[0001] The present invention relates to the technical field of enterprise internal audit, and in particular to an enterprise internal audit information system and method. Background Art

[0002] Internal audit is an important part of the internal control system. It reviews and evaluates the legality, effectiveness and appropriateness of the internal control and business activities of the enterprise, effectively manages the risks of the enterprise, improves the operation mechanism of the enterprise, promotes the development of the enterprise, helps the enterprise achieve its goals and reduces the operating risks. Therefore, fair and effective internal audit helps to improve the internal environment and plays an important role in improving the internal control of the enterprise. However, at present, the internal audit of enterprises mainly relies on manual audit by internal auditors of enterprises, and manual audit requires high professional ability of auditors. Financial knowledge, enterprise management cognition and computing technology must be mastered at the same time. In addition, manual audit is prone to errors when the data volume is large or the audit data is complex, and it is also easily affected by the outside world, resulting in the problem of insufficient fairness in the internal audit of enterprises. Summary of the invention

[0003] The present invention provides an enterprise internal audit information system and method. The present invention combines the risk monitoring and auditing of enterprise information, conducts self-inspection and self-correction of the enterprise according to a preset fixed period, normalizes the internal audit of the enterprise, reduces external interference, and effectively improves the efficiency of the internal audit of the enterprise and the fairness of the audit.

[0004] The present invention provides an enterprise internal audit information system, comprising:

[0005] The data collection module is used to trigger different audit types according to the corresponding audit time intervals and collect the audit data of the associated system corresponding to the target audit type;

[0006] Intelligent audit module, which is used to trigger the corresponding target audit process based on the audit type, and intelligently analyze the audit data according to the target audit process to obtain the audit results;

[0007] Notification storage module, used to generate audit report based on audit results and send it to the result receiving end of the corresponding associated system, and simultaneously generate audit log for storage;

[0008] The key monitoring module is used to conduct rectification monitoring on the audited data with abnormal audit results according to the preset rectification monitoring cycle, and generate a rectification monitoring end instruction to resume normal audit of the abnormal audited data after the abnormal audited data returns to normal.

[0009] Preferably, in an enterprise internal audit information system, the audit types include information construction audit, information system operation and maintenance audit, information security audit and business internal control audit;

[0010] The data to be audited includes project business information, background logs, software and hardware asset information, security settings information, installation information, and user operation information.

[0011] Preferably, in an enterprise internal audit information system, the data collection module includes:

[0012] An interval setting unit is used to set the audit time intervals corresponding to different audit types;

[0013] An audit control unit, used to trigger a target audit control instruction when a preset audit time interval corresponding to a target audit type is reached, and determine, in combination with an associated system audit setting table, an associated system that currently needs to be audited by the audit type;

[0014] The data collection unit is used to send audit control instructions to the associated system. After the management system responds to the audit control instructions, it collects the audited data related to the target audit type in the associated system and adds a data traceability tag to the audited data.

[0015] Preferably, in an enterprise internal audit information system, the intelligent audit module includes:

[0016] An audit trigger unit, used to trigger a corresponding target audit process based on a target audit type;

[0017] An intelligent classification unit, used for grouping the audit data based on the attribution characteristics corresponding to the audit data to obtain multiple audit data groups;

[0018] The identification audit unit is used to control the target audit process to perform intelligent analysis on the audit data group according to the preset audit sequence, and obtain the audit results corresponding to each audit data group.

[0019] Preferably, in an enterprise internal audit information system, identifying an audit unit includes:

[0020] The information construction audit sub-unit is used to audit the business in the associated system based on the various project business information in the associated system;

[0021] The system operation and maintenance audit subunit is used to audit the system operation and maintenance operations and system assets of the associated system based on the background logs and software and hardware asset information of the associated system;

[0022] An information security audit subunit, for auditing the system information security of the associated system based on the security setting information and installation data of the associated system;

[0023] The business internal control audit sub-unit is used to audit the user's operation behavior based on the user operation information in the relationship system and refer to the corresponding business management system requirements.

[0024] The present invention provides an enterprise internal audit information method, comprising:

[0025] Step 1: Trigger different audit types according to the corresponding audit time intervals, and collect the audit data of the associated systems corresponding to the target audit type;

[0026] Among them, audit types include information construction audit, information system operation and maintenance audit, information security audit and business internal control audit;

[0027] The data to be audited includes project business information, background logs, software and hardware asset information, security settings information, installation information, and user operation information;

[0028] Step 2: Trigger the corresponding target audit process based on the audit type, and perform intelligent analysis on the audit data according to the target audit process to obtain the audit results;

[0029] Step 3: Generate an audit report based on the audit results and send it to the result receiving end of the corresponding associated system, and simultaneously generate an audit log for storage;

[0030] Step 4: Conduct rectification monitoring on the audited data with abnormal audit results according to the preset rectification monitoring cycle, and generate a rectification monitoring end instruction after the abnormal audited data returns to normal, and resume normal auditing of the abnormal audited data.

[0031] Preferably, in an enterprise internal audit information method, step 2 includes:

[0032] Trigger the corresponding target audit process based on the target audit type;

[0033] The audit data are grouped based on the attribution characteristics corresponding to the audit data to obtain multiple audit data groups;

[0034] According to the preset audit sequence, the target audit process is controlled to perform intelligent analysis on the audit data groups and obtain the audit results corresponding to each audit data group.

[0035] Preferably, in an enterprise internal audit information method, according to a preset audit sequence, the target audit process is controlled to perform intelligent analysis on the audit data group, and the audit results corresponding to each audit data group are obtained respectively, including:

[0036] Audit the business in the associated system based on the various project business information in the associated system;

[0037] Audit the system operation and maintenance operations and system assets of the associated systems based on the background logs and software and hardware asset information of the associated systems;

[0038] Audit the system information security of the associated system based on the security setting information and installation data of the associated system;

[0039] Based on the user operation information within the relationship system, refer to the corresponding business management system requirements to audit the user's operation behavior.

[0040] Preferably, in an enterprise internal audit information method, step 3 includes:

[0041] Based on the audit results, refer to the audit result template corresponding to the target audit type to generate multiple audit reports;

[0042] Based on the data traceability labels corresponding to the various audit results, the matching communication protocols corresponding to the multiple audit reports are determined respectively, and the audit reports are sent to the result receiving end based on the matching communication protocols;

[0043] Obtain the sending information of each audit report respectively, generate an audit log based on the sending information, and store it after setting the audit log authority;

[0044] Among them, the audit log permission is prohibited from modification.

[0045] Compared with the prior art, the present invention has at least the following beneficial effects:

[0046] The present invention triggers different audit types according to the corresponding audit time intervals, normalizes the internal audit of the enterprise, conducts self-examination and self-correction of the enterprise according to a fixed period, collects the to-be-audited data of the associated system corresponding to the target audit type, triggers the target audit process corresponding to the to-be-audited data, and based on the target audit process, performs intelligent analysis on the to-be-audited data to obtain the audit results, thereby realizing the automated audit of the internal information of the enterprise, effectively eliminating the interference of external adverse factors, ensuring the fairness of the audit results, and providing objective and effective audit results, timely revealing risk hazards, reducing the probability of risk events, and reducing the losses and impacts caused by risk events when they occur; generating audit reports based on the audit results The audit report is sent to the result receiving end of the corresponding associated system, and an audit log is generated for storage simultaneously. It is an automatic notification of the audit results, which is convenient for the enterprise management to quickly know the current risk hazards of the enterprise and make timely improvements. The audit results are abnormal for the audited data according to the preset rectification monitoring cycle, and rectification monitoring is carried out to achieve key monitoring of risk data. After the abnormal audited data returns to normal, a rectification monitoring end instruction is generated to resume normal auditing of the abnormal audited data, realizing accurate monitoring of risk data throughout the process, completing risk data rectification tracking, and effectively urging and supervising relevant personnel to quickly process and rectify risk data to avoid greater losses.

[0047] Other features and advantages of the present invention will be described in the following description, and partly become apparent from the description, or understood by practicing the present invention. The purpose and other advantages of the present invention can be realized and obtained by the structures specifically pointed out in this application document.

[0048] The technical solution of the present invention is further described in detail below through the accompanying drawings and embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0049] The accompanying drawings are used to provide a further understanding of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the present invention and do not constitute a limitation of the present invention. In the accompanying drawings:

[0050] Figure 1 A schematic diagram of an enterprise internal audit information system according to the present invention;

[0051] Figure 2 A schematic diagram of a data acquisition module of an enterprise internal audit information system according to the present invention;

[0052] Figure 3 A schematic diagram of an intelligent audit module of an enterprise internal audit information system according to the present invention;

[0053] Figure 4 A schematic diagram of a notification storage module of an enterprise internal audit information system according to the present invention;

[0054] Figure 5 A schematic diagram of a key monitoring module of an enterprise internal audit information system according to the present invention;

[0055] Figure 6 The present invention is a flow chart of an enterprise internal audit information method. DETAILED DESCRIPTION

[0056] The preferred embodiments of the present invention are described below in conjunction with the accompanying drawings. It should be understood that the preferred embodiments described herein are only used to illustrate and explain the present invention, and are not used to limit the present invention.

[0057] Embodiment 1:

[0058] The present invention provides an enterprise internal audit information system, such as Figure 1 As shown, including:

[0059] The data collection module is used to trigger different audit types according to the corresponding audit time intervals and collect the audit data of the associated system corresponding to the target audit type;

[0060] Among them, audit types include information construction audit, information system operation and maintenance audit, information security audit and business internal control audit;

[0061] The data to be audited includes project business information, background logs, software and hardware asset information, security settings information, installation information, and user operation information;

[0062] Intelligent audit module, which is used to trigger the corresponding target audit process based on the audit type, and intelligently analyze the audit data according to the target audit process to obtain the audit results;

[0063] Notification storage module, used to generate audit report based on audit results and send it to the result receiving end of the corresponding associated system, and simultaneously generate audit log for storage;

[0064] The key monitoring module is used to conduct rectification monitoring on the audited data with abnormal audit results according to the preset rectification monitoring cycle, and generate a rectification monitoring end instruction to resume normal audit of the abnormal audited data after the abnormal audited data returns to normal.

[0065] In this embodiment, the audit time interval refers to the interval between two audits corresponding to different audit types.

[0066] In this embodiment, the target audit type refers to the audit type that is currently triggered.

[0067] In this embodiment, the associated system refers to a system associated with the enterprise internal audit information system described in the present invention, such as a desktop management system, an IP management system, an antivirus system, an I6000 system, a legal system, a procurement management system, a business management system, a marketing system, etc.

[0068] In this embodiment, the target audit process refers to the audit process corresponding to different audit types.

[0069] In this embodiment, the preset rectification monitoring cycle refers to a monitoring cycle for focusing on monitoring abnormal audit behaviors that are undergoing rectification and improvement, and the duration of two audits corresponding to this monitoring cycle is less than the audit time interval.

[0070] The beneficial effects of the above technical solution are as follows: the present invention triggers different audit types according to the corresponding audit time intervals, normalizes the internal audit of the enterprise, conducts self-inspection and self-correction of the enterprise according to a fixed period, collects the audited data of the associated system corresponding to the target audit type, triggers the target audit process corresponding to the audited data, and based on the target audit process, performs intelligent analysis on the audited data to obtain the audit results, thus realizing the automated audit of the internal information of the enterprise, effectively eliminating the interference of external adverse factors, ensuring the fairness of the audit results, and providing objective and effective audit results, timely revealing risk hazards, reducing the probability of risk events, and reducing the losses and impacts caused by risk events; based on the audit The audit results generate an audit report and send it to the result receiving end of the corresponding associated system, and the audit log is generated simultaneously for storage. It is an automatic notification of the audit results, which is convenient for the enterprise management to quickly know the current risk hazards of the enterprise and make timely improvements; and the audited data with abnormal audit results are subject to rectification monitoring according to the preset rectification monitoring cycle, to achieve key monitoring of risk data, and after the abnormal audited data returns to normal, generate a rectification monitoring end instruction to resume normal auditing of the abnormal audited data, realize the full-process accurate monitoring of risk data, complete the risk data rectification tracking, and effectively urge and supervise the relevant personnel to quickly process and rectify the risk data to avoid greater losses.

[0071] Example 2

[0072] Based on Example 1, the data acquisition module, such as Figure 2 As shown, including:

[0073] An interval setting unit is used to set the audit time intervals corresponding to different audit types;

[0074] An audit control unit, used to trigger a target audit control instruction when a preset audit time interval corresponding to a target audit type is reached, and determine, in combination with an associated system audit setting table, an associated system that currently needs to be audited by the audit type;

[0075] The data collection unit is used to send audit control instructions to the associated system. After the management system responds to the audit control instructions, it collects the audited data related to the target audit type in the associated system and adds a data traceability tag to the audited data.

[0076] The beneficial effects of the above technical solution are as follows: the present invention sets the audit time intervals corresponding to different audit types through the interval setting unit, thereby realizing the independence of audits of different audit types and reducing the data processing pressure of a single audit of the system; the time monitoring of different audit types is realized through the audit control unit, and when the preset audit time interval corresponding to the target audit type is reached, the target audit control instruction is triggered to ensure the timely completion of each audit, and in combination with the associated system audit setting table, the associated system that currently needs to be audited by the audit type is determined, and the collection location of the data to be audited is determined, providing a basis for the effective implementation of the audit work corresponding to the target audit type; and the audit control instruction is sent to the associated system through the data collection unit. After the management system responds to the audit control instruction, the data to be audited related to the associated system and the target audit type is collected, thereby ensuring the accuracy of the data collection target and improving the data security of the associated system. Adding data traceability tags to the data to be audited facilitates the accurate determination of the sending targets corresponding to each audit result when the same type of audit is performed on multiple associated systems (for example, information system operation and maintenance audit).

[0077] Example 3

[0078] Based on Example 1, the intelligent audit module, such as Figure 3 As shown, including:

[0079] An audit trigger unit, used to trigger a corresponding target audit process based on a target audit type;

[0080] An intelligent classification unit, used for grouping the audit data based on the attribution features corresponding to the audit data to obtain multiple audit data groups;

[0081] The identification audit unit is used to control the target audit process to perform intelligent analysis on the audit data group according to the preset audit sequence, and obtain the audit results corresponding to each audit data group.

[0082] In this embodiment, the attribution feature refers to the data classification feature jointly determined by the necessity of the audit combination of each audited data in the audit process and the data attribution associated system. For example, in the process of information construction audit, the audited data may come from two different systems, namely the procurement management system and the business management system. Because the reserve & plan consistency needs to be audited, the data of the same project in the two systems needs to be allocated to the same audit data group. When conducting an information security audit, the information security of different system data is audited, and the audited data needs to be classified according to the associated system. The security setting information and installation information of the same associated system are allocated to the same audit data group.

[0083] In this embodiment, the audit data group refers to a data group generated by allocating relevant data into a group according to the audit purpose of the target audit type and the attribution characteristics corresponding to the data to be audited.

[0084] In this embodiment, the preset audit sequence refers to the sequence in which each audit module in the audit process corresponding to each audit type is performed.

[0085] The beneficial effects of the above technical solution are as follows: the present invention triggers the target audit process corresponding to the target audit type through the audit trigger unit, and then groups the audit data based on the attribution characteristics corresponding to the audit data through the intelligent classification unit to obtain multiple audit data groups, thereby realizing preprocessing of the audit data, and processing the audit data from multiple related systems according to the actual audit requirements of the target audit type, thereby effectively improving the speed of the target audit process and improving the audit efficiency. The identification audit unit controls the target audit process to perform intelligent analysis on the audit data groups according to the preset audit sequence, and respectively obtains the audit results corresponding to each audit data group, thereby realizing automatic auditing of various information within the enterprise.

[0086] Embodiment 4:

[0087] Based on Example 3, the audit unit is identified, such as Figure 3 As shown, including:

[0088] The information construction audit sub-unit is used to audit the business in the associated system based on the various project business information in the associated system;

[0089] The system operation and maintenance audit subunit is used to audit the system operation and maintenance operations and system assets of the associated system based on the background logs and software and hardware asset information of the associated system;

[0090] An information security audit subunit, for auditing the system information security of the associated system based on the security setting information and installation data of the associated system;

[0091] The business internal control audit sub-unit is used to audit the user's operation behavior based on the user operation information in the relationship system and refer to the corresponding business management system requirements.

[0092] In this embodiment, the information construction audit sub-unit includes nine audit modules: comprehensive query of reserve project information, comparison of feasibility report / project description information, query of project plan information, accuracy of plan issuance, query of information on projects under construction, compliance of contract signing time, payment of projects in accordance with regulations, query of information system application effectiveness, and query of information system function points. By associating the project business information of the system, audits such as consistency of construction reserves and plans, rationality of plan execution, accuracy of plan issuance, standardization of contract signing, rationality of service scope, and compliance of payment and settlement can be completed.

[0093] The system operation and maintenance audit sub-unit includes two audit modules: database log query of information system and query and analysis of software and hardware asset information. By associating the background logs of system operation, it analyzes system data maintenance behavior in multiple dimensions, supervises and evaluates non-compliant operations, and improves the security of information system operation. At the same time, through software and hardware asset information, it fully understands the asset distribution, value, transfer and depreciation, and improves the utilization efficiency of information assets.

[0094] The system operation and maintenance audit sub-unit includes six audit modules: intranet computers not included in terminal security management, information security equipment version query, intranet desktop terminal installation program query, intranet desktop terminal patch query, intranet server installation program query and intranet server patch query. It conducts an objective evaluation of the information security of the related system by querying and analyzing potential risks and problems in terminal security management, equipment version management, intranet terminal patch management, etc.

[0095] The business internal control audit sub-unit includes 15 audit modules, including user account information query of employees in a single information system, information system user account sharing, zombie account query, user permission information query of a single information system, unified permission platform system permission allocation query, incompatible permissions being assigned to the same user, untimely user permission adjustment, over-empowerment of roles, inconsistency between role allocation and user's actual position, flow of all key links of the process completed by the same IP, inconsistent audit of procurement management process, inconsistent audit of contract management process, inconsistent audit of inventory management process, inconsistent audit of marketing business accounting process and user information query of key positions in the information system. The account management of the information system is reviewed and evaluated in accordance with the account permission setting requirements. At the same time, in accordance with the business management system requirements, relevant user operation information of related systems is extracted, and closed-loop testing is carried out on important business processes in marketing, finance, materials, human resources and engineering to ensure that business circulation and approval procedures meet the company's requirements.

[0096] The beneficial effects of the above technical solution: The present invention audits different data through the information construction audit sub-unit, the system operation and maintenance audit sub-unit, the information security audit sub-unit and the business internal control audit sub-unit, so that enterprises can determine the normalized review time of different audit types according to their own circumstances, conduct separate audits on different audit types, reduce the data processing pressure of the audit system, and realize comprehensive and regular audits of system information of various systems within the enterprise.

[0097] Example 5

[0098] Based on Example 1, the storage module is notified, such as Figure 4 As shown, including:

[0099] A result calibration unit is used to generate multiple audit reports based on the audit results and with reference to the audit result template corresponding to the target audit type;

[0100] A result notification unit is used to determine the matching communication protocols corresponding to the multiple audit reports based on the data traceability tags corresponding to the audit results, and send the audit reports to the result receiving end based on the matching communication protocols;

[0101] A result storage unit, used to obtain the sending information of each audit report, generate an audit log based on the sending information, and store the audit log after setting the audit log authority;

[0102] Among them, the audit log permission is prohibited from modification.

[0103] In this embodiment, the sending information includes the sending time, recipient, and review report of the audit report.

[0104] The beneficial effects of the above technical solution: the present invention standardizes the audit results according to the audit result template corresponding to the target audit type, generates a sendable audit report, realizes automatic standardization of the audit result format, and based on the data traceability label corresponding to each audit result, respectively determines the matching communication protocols corresponding to multiple audit reports, and sends the audit report to the result receiving end based on the matching communication protocol, which ensures the accuracy of the report sending while ensuring data security, and obtains the sending information of each audit report when the audit report is sent, generates an audit log based on the sending information, and stores it after setting the audit log permissions, providing a true and reliable basis for internal audit accountability within the enterprise.

[0105] Example 6

[0106] Based on Example 1, the key monitoring modules are as follows: Figure 5 As shown, including:

[0107] The identification and judgment unit is used to identify the audit results. When the audit results are abnormal, the data to be audited is determined to be abnormal, and the data to be audited is used as abnormal audit data. According to the data traceability label, an abnormal label is generated and added to the association identifier of the associated system corresponding to the abnormal audit data; wherein, the data acquisition module automatically skips the abnormal audit data when collecting data from the associated system;

[0108] If the audit result is normal, the data to be audited is considered normal;

[0109] The rectification monitoring module is used to collect abnormal audit data according to the rectification monitoring cycle and send it to the intelligent audit module for intelligent analysis to obtain the monitoring audit results;

[0110] The monitoring and judgment unit is used to obtain all monitoring and auditing results corresponding to the current rectification monitoring stage and judge whether the abnormal audited data has returned to normal;

[0111] When the abnormal data to be audited returns to normal, a rectification monitoring end instruction is generated, the abnormal label on the association identifier of the association system corresponding to the abnormal audit data is eliminated, and the data acquisition module is controlled to restore the normal audit of the abnormal data to be audited.

[0112] In this embodiment, the audit result abnormality refers to the result abnormality of the audit type corresponding to the audited data during the audit process. For example, during the business internal control audit process, if the same person logs in from two different places within 5 minutes, it is determined that the person's account may have account borrowing or impersonation abnormalities; if someone operates and fills in data sheet A, but actual monitoring finds that there is an operation on data sheet B, it is determined that the person has an abnormality of suspected unauthorized access; if someone tries to access a menu permission that he does not have in the application browser, it is determined that the person is suspected of attempting unauthorized access abnormalities.

[0113] In this embodiment, the association identifier refers to the association relationship identifier between each relationship system and the enterprise internal audit information system described in the present invention.

[0114] The beneficial effects of the above technical solution are as follows: the present invention confirms the audit data according to the audit results, so as to determine whether the audit data is the abnormal audit data that is subject to key monitoring, and then generates an abnormal label based on the judgment result and the data traceability label, and adds it to the associated identifier of the associated system corresponding to the abnormal audit data, so as to avoid the abnormal audit data from being audited repeatedly. The rectification monitoring module collects the abnormal audit data according to the rectification monitoring cycle, and sends it to the intelligent audit module for intelligent analysis to obtain the monitoring audit results, thereby realizing the tracking of abnormal audit data, overcoming the problem of untimely manual tracking and rectification, and effectively urging the enterprise to solve information risk problems in a timely manner to avoid the expansion of risks. When the abnormal audit data returns to normal, a rectification monitoring end instruction is generated to eliminate the abnormal label on the associated identifier of the associated system corresponding to the abnormal audit data, and control the data acquisition module to restore the normal audit of the abnormal audit data, thereby avoiding the waste of key monitoring audit resources.

[0115] Example 7

[0116] Based on Example 6, the monitoring and judging unit, such as Figure 5 As shown, including:

[0117] The first judgment subunit is used to obtain all monitoring audit results of the current rectification monitoring stage corresponding to the abnormal audit data, and judge whether the abnormal audit data has been qualified for a preset number of consecutive times. If so, it is judged that the abnormal audit data has returned to normal;

[0118] Otherwise, obtain the abnormal similarity between the abnormal audit data and the initial abnormal audit data in each rectification monitoring audit process in the current rectification monitoring stage;

[0119] The second judgment subunit is used to judge whether the abnormal similarity has changed. When the abnormal similarity has not changed, the target rectification measures corresponding to the abnormal audit data are obtained to determine the rectification effective time;

[0120] When the current rectification monitoring audit time is greater than or equal to the rectification effective time, the abnormal audit data is judged to be negatively rectified, and a red warning is sent to the corresponding result receiving end and the management responsible person corresponding to the abnormal audit data;

[0121] When the current rectification monitoring audit time is less than the rectification effective time, continue to conduct rectification monitoring audit on abnormal audit data;

[0122] When the abnormal similarity changes, obtain the numerical difference between the current abnormal similarity and the previous adjacent abnormal similarity, and judge whether the numerical difference is greater than the reference threshold. When the numerical difference is greater than the reference threshold, it is determined that the rectification speed of the abnormal audit data is slow, and judge whether the numerical difference is greater than the preset threshold. If so, send a first-level acceleration notification to the corresponding result receiving terminal and the management responsible person corresponding to the abnormal audit data;

[0123] Otherwise, a secondary expedited notification is sent to the corresponding result receiving end and the person responsible for the management of the abnormal audit data;

[0124] When the numerical difference is not greater than the reference threshold, continue to conduct rectification monitoring audit on the abnormal audit data.

[0125] In this embodiment, the current rectification monitoring stage refers to the entire time corresponding to the current focus and memory of abnormal audit data.

[0126] In this embodiment, the monitoring audit result refers to the result obtained by auditing abnormal audit data according to the rectification monitoring cycle.

[0127] In this embodiment, the initial abnormal audit data refers to the data to be audited that is determined to be abnormal data and is the corresponding data.

[0128] In this embodiment, the abnormal similarity refers to the similarity between the abnormal audit data corresponding to each monitoring audit in the current rectification monitoring stage and the initial abnormal audit data.

[0129] In this embodiment, the rectification effective time refers to the latest start time of the rectification corresponding to the abnormal audit data.

[0130] In this embodiment, the red warning refers to a notification that the management responsible person corresponding to the abnormal audit data has passively rectified the abnormal audit data. Passive rectification means that the abnormal audit data does not make adjustments according to the target rectification measures within a given period of time.

[0131] In this embodiment, the numerical difference refers to the difference between the current anomaly similarity and the previous adjacent anomaly similarity.

[0132] In this embodiment, the first-level accelerated notification refers to a rectification supervision notification sent to the person in charge of management and the result receiving end when there is a risk that the abnormal audit data will be adjusted according to the target rectification measures within a given period, but the rectification speed is slow, and the rectification speed is greater than the minimum rectification speed (pre-set threshold) but less than or equal to the expected rectification speed (reference threshold); the second-level accelerated notification refers to a rectification supervision notification sent to the person in charge of management and the result receiving end when there is a risk that the abnormal audit data will be adjusted according to the target rectification measures within a given period, but the rectification speed is slow, and the rectification speed is less than or equal to the minimum rectification speed (pre-set threshold).

[0133] Among them, the urgency of the second-level accelerated notification is greater than that of the first-level accelerated notification, but less than that of the red warning.

[0134] The beneficial effects of the above technical solution are as follows: the present invention obtains all monitoring and auditing results of the current rectification monitoring stage corresponding to the abnormal audit data through the first judgment unit, judges whether the abnormal audit data has been qualified for a preset number of consecutive times, thereby determining whether the abnormal audit data has returned to normal, and when the abnormal audit data has not returned to normal, obtains the abnormal similarity between the abnormal audit data and the initial abnormal audit data in each rectification monitoring and audit process in the current rectification monitoring stage, makes a preliminary judgment on the rectification progress of the abnormal audit data through the second judgment unit, and sends a red warning to the corresponding result receiving terminal and the management responsible person corresponding to the abnormal audit data when it is found that the abnormal audit data is negatively rectified, thereby realizing intelligent monitoring of the rectification of abnormal audit data, ensuring that the internal audit problems of the enterprise are rectified and resolved within the rectification effective time, and effectively avoiding the expansion of risks. After the rectification begins, the numerical difference between the current anomaly similarity and the previous adjacent anomaly similarity is obtained to judge the current rectification speed. When the numerical difference is greater than the reference threshold, it is determined that the rectification speed of the abnormal audit data is slow, and it is determined whether the numerical difference is greater than the preset threshold. If so, a first-level acceleration notice is sent to the corresponding result receiving end and the management responsible person corresponding to the abnormal audit data; otherwise, a second-level acceleration notice is sent to the corresponding result receiving end and the management responsible person corresponding to the abnormal audit data; when the numerical difference is not greater than the reference threshold, the rectification monitoring audit of the abnormal audit data continues, the orderly rectification of the abnormal audit data is supervised, and the management responsible person is urged to efficiently complete the rectification of the abnormal audit data within the specified time (maximum consumption time), reduce the passive processing rate of abnormal audit data, help enterprises achieve their goals, and reduce operating risks.

[0135] Example 8

[0136] Based on Example 7, the monitoring and judging unit is as follows: Figure 5 As shown, it also includes:

[0137] A threshold setting unit is used to obtain the maximum consumption time of the target rectification measures corresponding to the abnormal data based on the audit system, segment the maximum consumption time based on the preset rectification monitoring cycle, obtain the segmentation result, obtain the minimum rectification speed corresponding to the target rectification measures according to the segmentation result, and set the minimum rectification speed as the preset threshold;

[0138] A reference adjustment unit is used to obtain multiple valid historical records corresponding to target rectification measures corresponding to abnormal audit data, and to screen the valid historical records based on the highest consumption time to obtain qualified records;

[0139] Based on the qualified records, determine the historical rectification monitoring time corresponding to each historical abnormal audit data, and compare the total amount of historical rectification data to determine the impact characteristics of data volume on rectification time;

[0140] Obtain the total amount of current rectification data corresponding to the abnormal audit data, compare them with multiple historical abnormal audit data, obtain the total amount of multiple similar historical rectification data, and obtain the average duration based on the historical rectification monitoring duration corresponding to the similar historical abnormal audit data;

[0141] The data volume difference between the current total amount of rectification data and each similar historical total amount of rectification data is obtained respectively, and the average data volume difference is calculated;

[0142] Based on the impact characteristics and the average data volume difference, the average duration is corrected to obtain the predicted duration corresponding to the current total amount of rectification data;

[0143] Based on the preset rectification monitoring cycle, the predicted duration is segmented to obtain the segmentation results, and according to the segmentation results, the expected rectification speed corresponding to the target rectification measures is obtained, and the predicted rectification speed is set as a reference threshold.

[0144] In this embodiment, the audit system refers to the audit requirements corresponding to different audit types and the time requirements for rectifying abnormal audit data.

[0145] In this embodiment, the maximum consumption time refers to the maximum time limit for abnormal audit data required by the enterprise, for example, within 7 working days.

[0146] In this embodiment, the minimum rectification speed refers to the workload (data change) corresponding to each preset rectification monitoring cycle within the maximum consumption time, taking the workload corresponding to the entire target rectification measure as 1. , where N is the minimum number of cycles corresponding to the preset rectification monitoring cycle within the maximum consumption time.

[0147] In this embodiment, qualified records refer to valid historical records of target rectification measures completed within the maximum consumption time. Valid historical records refer to rectification records that are the same as the target rectification measures corresponding to the abnormal data in the recent period (for example, 3 months or half a year).

[0148] In this embodiment, the historical abnormal audit data refers to the abnormal audit data corresponding to each qualified record.

[0149] In this embodiment, the historical rectification monitoring duration refers to the time rectification duration corresponding to each historical abnormal audit data.

[0150] In this embodiment, the total amount of historical rectification data refers to the amount of historical abnormal audit data.

[0151] In this embodiment, the impact feature refers to the impact of the amount of data on the rectification time.

[0152] In this embodiment, the current total amount of rectification data refers to the amount of abnormal audit data.

[0153] In this embodiment, the total amount of similar historical rectification data refers to the total amount of historical rectification data that is within a preset range with the total amount of current rectification data.

[0154] In this embodiment, the average duration refers to the average value of the historical rectification monitoring durations corresponding to all similar historical abnormal audit data.

[0155] In this embodiment, the average data volume difference refers to the average value of the difference between the total volume of each similar historical rectification data and the total volume of the current rectification data.

[0156] In this embodiment, the expected rectification speed refers to the workload (data change) corresponding to each preset rectification monitoring cycle within the forecast period, taking the workload corresponding to the entire target rectification measure as 1. , where M is the minimum number of cycles corresponding to the preset rectification monitoring cycle within the prediction time.

[0157] The beneficial effects of the above technical solution are as follows: the present invention determines the minimum rectification speed through the maximum consumption time of the target rectification measures corresponding to the abnormal data specified by the audit system and sets the minimum rectification speed as a preset threshold, thereby providing a minimum reference value for the rectification of abnormal audit data and a minimum standard for rectification supervision, thereby maximally controlling the rectification time of abnormal audit data within the time (i.e., the maximum consumption time) within which the enterprise can bear the risk, thereby ensuring that risk issues are resolved in a timely manner, and determining the historical rectification monitoring time corresponding to each historical abnormal audit data according to the qualified records in the valid historical records, and comparing the total amount of historical rectification data to determine the impact characteristics of the data volume on the rectification time; obtaining the total amount of current rectification data corresponding to the abnormal audit data, and comparing them with multiple historical abnormal audit data respectively, to obtain multiple corresponding The total amount of similar historical rectification data is obtained, and the average duration is obtained based on the historical rectification monitoring time corresponding to the similar historical abnormal audit data; the data volume difference between the current total amount of rectification data and each similar historical rectification data volume is obtained, and the average data volume difference is calculated; based on the impact characteristics and the average data volume difference, the average duration is corrected to obtain the predicted duration corresponding to the current total amount of rectification data, and based on the preset rectification monitoring cycle, the predicted duration is segmented to obtain the segmentation result, and according to the segmentation result, the expected rectification speed corresponding to the target rectification measure is obtained, and the predicted rectification speed is set as the reference threshold to provide an expected reference value for the rectification of abnormal audit data, shorten the rectification use time of abnormal audit data as much as possible, and minimize the expansion of the risk of abnormal problems in the enterprise under the premise of meeting the actual situation.

[0158] Embodiment 9:

[0159] Based on Example 1, an enterprise internal audit information system further includes:

[0160] The audit system setting module is used to obtain the latest audit requirements of the enterprise, compare the latest audit requirements with the original audit requirements, obtain the difference in requirements, and synchronously update the audit system based on the difference in requirements.

[0161] In this embodiment, the latest audit requirements refer to the latest rules and regulations corresponding to various audit types, such as changes in the maximum consumption time corresponding to audit rectification.

[0162] In this embodiment, the requirement difference refers to the difference between the latest audit requirement and the original audit requirement.

[0163] The beneficial effects of the above technical solution are as follows: the present invention obtains the latest audit requirements of the enterprise through the audit system setting module, compares the latest audit requirements with the original audit requirements, obtains the difference in requirements, and synchronously updates the audit system based on the difference in requirements, thereby realizing automatic update of the system audit system.

[0164] Embodiment 10:

[0165] The present invention provides an enterprise internal audit information method, such as Figure 6 As shown, including:

[0166] Step 1: Trigger different audit types according to the corresponding audit time intervals, and collect the audit data of the associated systems corresponding to the target audit type;

[0167] Among them, audit types include information construction audit, information system operation and maintenance audit, information security audit and business internal control audit;

[0168] The data to be audited includes project business information, background logs, software and hardware asset information, security settings information, installation information, and user operation information;

[0169] Step 2: Trigger the corresponding target audit process based on the audit type, and perform intelligent analysis on the audit data according to the target audit process to obtain the audit results;

[0170] Step 3: Generate an audit report based on the audit results and send it to the result receiving end of the corresponding associated system, and simultaneously generate an audit log for storage;

[0171] Step 4: Conduct rectification monitoring on the audited data with abnormal audit results according to the preset rectification monitoring cycle, and generate a rectification monitoring end instruction after the abnormal audited data returns to normal, and resume normal auditing of the abnormal audited data.

[0172] The beneficial effects of the above technical solution are as follows: the present invention triggers different audit types according to the corresponding audit time intervals, normalizes the internal audit of the enterprise, conducts self-inspection and self-correction of the enterprise according to a fixed period, collects the audited data of the associated system corresponding to the target audit type, triggers the target audit process corresponding to the audited data, and based on the target audit process, performs intelligent analysis on the audited data to obtain the audit results, thus realizing the automated audit of the internal information of the enterprise, effectively eliminating the interference of external adverse factors, ensuring the fairness of the audit results, and providing objective and effective audit results, timely revealing risk hazards, reducing the probability of risk events, and reducing the losses and impacts caused by risk events; based on the audit The audit results generate an audit report and send it to the result receiving end of the corresponding associated system, and the audit log is generated simultaneously for storage. It is an automatic notification of the audit results, which is convenient for the enterprise management to quickly know the current risk hazards of the enterprise and make timely improvements; and the audited data with abnormal audit results are subject to rectification monitoring according to the preset rectification monitoring cycle, to achieve key monitoring of risk data, and after the abnormal audited data returns to normal, generate a rectification monitoring end instruction to resume normal auditing of the abnormal audited data, realize the full-process accurate monitoring of risk data, complete the risk data rectification tracking, and effectively urge and supervise the relevant personnel to quickly process and rectify the risk data to avoid greater losses.

[0173] Embodiment 11:

[0174] On the basis of Example 10, step 2 comprises:

[0175] Trigger the corresponding target audit process based on the target audit type;

[0176] The audit data are grouped based on the attribution characteristics corresponding to the audit data to obtain multiple audit data groups;

[0177] According to the preset audit sequence, the target audit process is controlled to perform intelligent analysis on the audit data groups and obtain the audit results corresponding to each audit data group.

[0178] The beneficial effects of the above technical solution are as follows: the present invention triggers the target audit process corresponding to the target audit type, and then groups the audit data based on the attribution characteristics corresponding to the audited data to obtain multiple audit data groups, thereby realizing preprocessing of the audited data. The audited data from multiple related systems are processed according to the actual audit requirements of the target audit type, thereby effectively improving the speed of the target audit process and the audit efficiency. Finally, according to the preset audit sequence, the target audit process is controlled to perform intelligent analysis on the audit data groups, and the audit results corresponding to each audit data group are respectively obtained, thereby realizing automatic auditing of various information within the enterprise.

[0179] Embodiment 12:

[0180] On the basis of Example 11, according to the preset audit sequence, the target audit process is controlled to perform intelligent analysis on the audit data group, and the audit results corresponding to each audit data group are obtained respectively, including:

[0181] Audit the business in the associated system based on the various project business information in the associated system;

[0182] Audit the system operation and maintenance operations and system assets of the associated systems based on the background logs and software and hardware asset information of the associated systems;

[0183] Audit the system information security of the associated system based on the security setting information and installation data of the associated system;

[0184] Based on the user operation information within the relationship system, refer to the corresponding business management system requirements to audit the user's operation behavior.

[0185] The beneficial effects of the above technical solution: the present invention audits different data separately, which is convenient for enterprises to determine the normalized review time of different audit types according to their own circumstances, and audits different audit types separately, thereby reducing the data processing pressure of the audit system and realizing a comprehensive and regular audit of the system information of various systems within the enterprise.

[0186] Embodiment 13:

[0187] On the basis of Example 10, step 3 comprises:

[0188] Based on the audit results, refer to the audit result template corresponding to the target audit type to generate multiple audit reports;

[0189] Based on the data traceability labels corresponding to the various audit results, the matching communication protocols corresponding to the multiple audit reports are determined respectively, and the audit reports are sent to the result receiving end based on the matching communication protocols;

[0190] Obtain the sending information of each audit report respectively, generate an audit log based on the sending information, and store it after setting the audit log authority;

[0191] Among them, the audit log permission is prohibited from modification.

[0192] The beneficial effects of the above technical solution: the present invention standardizes the audit results according to the audit result template corresponding to the target audit type, generates a sendable audit report, realizes automatic standardization of the audit result format, and based on the data traceability label corresponding to each audit result, respectively determines the matching communication protocols corresponding to multiple audit reports, and sends the audit report to the result receiving end based on the matching communication protocol, which ensures the accuracy of the report sending while ensuring data security, and obtains the sending information of each audit report when the audit report is sent, generates an audit log based on the sending information, and stores it after setting the audit log permissions, providing a true and reliable basis for internal audit accountability within the enterprise.

[0193] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. An enterprise internal audit information system, characterized in that: include: The data collection module is used to trigger different audit types according to the corresponding audit time intervals and collect the audit data of the associated system corresponding to the target audit type; Intelligent audit module, which is used to trigger the corresponding target audit process based on the audit type, and intelligently analyze the audit data according to the target audit process to obtain the audit results; Notification storage module, used to generate audit report based on audit results and send it to the result receiving end of the corresponding associated system, and simultaneously generate audit log for storage; The key monitoring module is used to conduct rectification monitoring on the audited data with abnormal audit results according to the preset rectification monitoring cycle, and generate rectification monitoring end instructions after the abnormal audited data returns to normal, and resume normal auditing of the abnormal audited data; Among them, the key monitoring modules include: The identification and judgment unit is used to identify the audit results. When the audit results are abnormal, the data to be audited is determined to be abnormal, and the data to be audited is used as abnormal audit data. According to the data traceability label, an abnormal label is generated and added to the association identifier of the associated system corresponding to the abnormal audit data; wherein, the data acquisition module automatically skips the abnormal audit data when collecting data from the associated system; If the audit result is normal, the data to be audited is considered normal; The rectification monitoring module is used to collect abnormal audit data according to the rectification monitoring cycle and send it to the intelligent audit module for intelligent analysis to obtain the monitoring audit results; The monitoring and judgment unit is used to obtain all monitoring and auditing results corresponding to the current rectification monitoring stage and judge whether the abnormal audited data has returned to normal; When the abnormal data to be audited returns to normal, a rectification monitoring end instruction is generated, the abnormal label on the association identifier of the association system corresponding to the abnormal audit data is eliminated, and the data acquisition module is controlled to restore the normal audit of the abnormal data to be audited; The monitoring and judging unit includes: The first judgment subunit is used to obtain all monitoring audit results of the current rectification monitoring stage corresponding to the abnormal audit data, and judge whether the abnormal audit data has been qualified for a preset number of consecutive times. If so, it is judged that the abnormal audit data has returned to normal; Otherwise, obtain the abnormal similarity between the abnormal audit data and the initial abnormal audit data in each rectification monitoring audit process in the current rectification monitoring stage; The second judgment subunit is used to judge whether the abnormal similarity has changed. When the abnormal similarity has not changed, the target rectification measures corresponding to the abnormal audit data are obtained to determine the rectification effective time; When the current rectification monitoring audit time is greater than or equal to the rectification effective time, the abnormal audit data is judged to be negatively rectified, and a red warning is sent to the corresponding result receiving end and the management responsible person corresponding to the abnormal audit data; When the current rectification monitoring audit time is less than the rectification effective time, continue to conduct rectification monitoring audit on abnormal audit data; When the abnormal similarity changes, obtain the numerical difference between the current abnormal similarity and the previous adjacent abnormal similarity, and judge whether the numerical difference is greater than the reference threshold. When the numerical difference is greater than the reference threshold, it is determined that the rectification speed of the abnormal audit data is slow, and judge whether the numerical difference is greater than the preset threshold. If so, send a first-level acceleration notification to the corresponding result receiving terminal and the management responsible person corresponding to the abnormal audit data; Otherwise, a secondary expedited notification is sent to the corresponding result receiving end and the person responsible for the management of the abnormal audit data; When the numerical difference is not greater than the reference threshold, continue to conduct rectification monitoring audit on the abnormal audit data; A threshold setting unit is used to obtain the maximum consumption time of the target rectification measures corresponding to the abnormal data based on the audit system, segment the maximum consumption time based on the preset rectification monitoring cycle, obtain the segmentation result, obtain the minimum rectification speed corresponding to the target rectification measures according to the segmentation result, and set the minimum rectification speed as the preset threshold; A reference adjustment unit is used to obtain multiple valid historical records corresponding to target rectification measures corresponding to abnormal audit data, and to screen the valid historical records based on the highest consumption time to obtain qualified records; Based on the qualified records, determine the historical rectification monitoring time corresponding to each historical abnormal audit data, and compare the total amount of historical rectification data to determine the impact characteristics of data volume on rectification time; Obtain the total amount of current rectification data corresponding to the abnormal audit data, compare them with multiple historical abnormal audit data, obtain the total amount of multiple similar historical rectification data, and obtain the average duration based on the historical rectification monitoring duration corresponding to the similar historical abnormal audit data; The data volume difference between the current total amount of rectification data and the total amount of each similar historical rectification data is obtained respectively, and the average data volume difference is calculated; Based on the impact characteristics and the average data volume difference, the average duration is corrected to obtain the predicted duration corresponding to the current total amount of rectification data; Based on the preset rectification monitoring cycle, the predicted duration is segmented to obtain the segmentation results, and according to the segmentation results, the expected rectification speed corresponding to the target rectification measures is obtained, and the predicted rectification speed is set as a reference threshold.

2. According to claim 1, an enterprise internal audit information system is characterized by: Audit types include information construction audit, information system operation and maintenance audit, information security audit and business internal control audit; The data to be audited includes project business information, background logs, software and hardware asset information, security settings information, installation information, and user operation information.

3. According to claim 1, an enterprise internal audit information system is characterized in that: Data acquisition module, including: An interval setting unit is used to set the audit time intervals corresponding to different audit types; An audit control unit, used to trigger a target audit control instruction when a preset audit time interval corresponding to a target audit type is reached, and determine, in combination with an associated system audit setting table, an associated system that currently needs to be audited by the audit type; The data collection unit is used to send audit control instructions to the associated system. After the management system responds to the audit control instructions, it collects the audited data related to the target audit type in the associated system and adds a data traceability tag to the audited data.

4. According to claim 1, an enterprise internal audit information system is characterized in that: Intelligent audit module, including: An audit trigger unit, used to trigger a corresponding target audit process based on a target audit type; An intelligent classification unit, used for grouping the audit data based on the attribution characteristics corresponding to the audit data to obtain multiple audit data groups; The identification audit unit is used to control the target audit process to perform intelligent analysis on the audit data group according to the preset audit sequence, and obtain the audit results corresponding to each audit data group.

5. An enterprise internal audit information system according to claim 4, characterized in that: Identify audit units, including: The information construction audit sub-unit is used to audit the business in the associated system based on the various project business information in the associated system; The system operation and maintenance audit subunit is used to audit the system operation and maintenance operations and system assets of the associated system based on the background logs and software and hardware asset information of the associated system; An information security audit subunit, for auditing the system information security of the associated system based on the security setting information and installation data of the associated system; The business internal control audit sub-unit is used to audit the user's operation behavior based on the user operation information in the relationship system and refer to the corresponding business management system requirements.

6. An enterprise internal audit information system according to claim 1, characterized in that: Also includes: The audit system setting module is used to obtain the latest audit requirements of the enterprise, compare the latest audit requirements with the original audit requirements, obtain the difference in requirements, and synchronously update the audit system based on the difference in requirements.

7. An enterprise internal audit information method, characterized in that: include: Step 1: Trigger different audit types according to the corresponding audit time intervals, and collect the audit data of the associated systems corresponding to the target audit type; Among them, audit types include information construction audit, information system operation and maintenance audit, information security audit and business internal control audit; The data to be audited includes project business information, background logs, software and hardware asset information, security settings information, installation information, and user operation information; Step 2: Trigger the corresponding target audit process based on the audit type, and perform intelligent analysis on the audit data according to the target audit process to obtain the audit results; Step 3: Generate an audit report based on the audit results and send it to the result receiving end of the corresponding associated system, and simultaneously generate an audit log for storage; Step 4: For the audit data with abnormal audit results, rectification monitoring is carried out according to the preset rectification monitoring cycle, and after the abnormal audit data returns to normal, a rectification monitoring end instruction is generated to resume normal audit of the abnormal audit data; Among them, the audited data with abnormal audit results are subject to rectification monitoring according to the preset rectification monitoring cycle, and after the abnormal audited data returns to normal, a rectification monitoring end instruction is generated to restore the normal audit of the abnormal audited data, including: Identify the audit results. When the audit results are abnormal, the data to be audited is determined to be abnormal, and the data to be audited is used as abnormal audit data. According to the data traceability label, an abnormal label is generated and added to the association identifier of the associated system corresponding to the abnormal audit data; wherein, the data acquisition module automatically skips the abnormal audit data when collecting data from the associated system; If the audit result is normal, the data to be audited is considered normal; Used to collect abnormal audit data according to the rectification monitoring cycle and send it to the intelligent audit module for intelligent analysis to obtain monitoring audit results; Obtain all monitoring and auditing results corresponding to the current rectification monitoring phase, and determine whether the abnormal audited data has returned to normal; When the abnormal data to be audited returns to normal, a rectification monitoring end instruction is generated, the abnormal label on the association identifier of the association system corresponding to the abnormal audit data is eliminated, and the data acquisition module is controlled to restore the normal audit of the abnormal data to be audited; Among them, obtain all monitoring and auditing results corresponding to the current rectification monitoring stage, and judge whether the abnormal audited data has returned to normal, including: Obtain all monitoring and auditing results of the current rectification monitoring phase corresponding to the abnormal auditing data, and determine whether the abnormal auditing data has been qualified for a preset number of consecutive times. If so, determine that the abnormal auditing data has returned to normal; Otherwise, obtain the abnormal similarity between the abnormal audit data and the initial abnormal audit data in each rectification monitoring audit process in the current rectification monitoring stage; Determine whether the anomaly similarity has changed. If the anomaly similarity has not changed, obtain the target rectification measures corresponding to the abnormal audit data and determine the rectification effective time; When the current rectification monitoring audit time is greater than or equal to the rectification effective time, the abnormal audit data is judged to be negatively rectified, and a red warning is sent to the corresponding result receiving end and the management responsible person corresponding to the abnormal audit data; When the current rectification monitoring audit time is less than the rectification effective time, continue to conduct rectification monitoring audit on abnormal audit data; When the abnormal similarity changes, obtain the numerical difference between the current abnormal similarity and the previous adjacent abnormal similarity, and judge whether the numerical difference is greater than the reference threshold. When the numerical difference is greater than the reference threshold, it is determined that the rectification speed of the abnormal audit data is slow, and judge whether the numerical difference is greater than the preset threshold. If so, send a first-level acceleration notification to the corresponding result receiving terminal and the management responsible person corresponding to the abnormal audit data; Otherwise, a secondary expedited notification is sent to the corresponding result receiving end and the person responsible for the management of the abnormal audit data; When the numerical difference is not greater than the reference threshold, continue to conduct rectification monitoring audit on the abnormal audit data; Among them, obtaining all monitoring and auditing results corresponding to the current rectification monitoring stage and judging whether the abnormal audited data has returned to normal also include: Obtain multiple valid historical records corresponding to the target rectification measures corresponding to the abnormal audit data, filter the valid historical records based on the highest consumption time, and obtain qualified records; Based on the qualified records, determine the historical rectification monitoring time corresponding to each historical abnormal audit data, and compare the total amount of historical rectification data to determine the impact characteristics of data volume on rectification time; Obtain the total amount of current rectification data corresponding to the abnormal audit data, compare them with multiple historical abnormal audit data, obtain the total amount of multiple similar historical rectification data, and obtain the average duration based on the historical rectification monitoring duration corresponding to the similar historical abnormal audit data; The data volume difference between the current total amount of rectification data and the total amount of each similar historical rectification data is obtained respectively, and the average data volume difference is calculated; Based on the impact characteristics and the average data volume difference, the average duration is corrected to obtain the predicted duration corresponding to the current total amount of rectification data; Based on the preset rectification monitoring cycle, the predicted duration is segmented to obtain the segmentation results, and according to the segmentation results, the expected rectification speed corresponding to the target rectification measures is obtained, and the predicted rectification speed is set as a reference threshold.

8. The method for internal audit information of an enterprise according to claim 7, characterized in that: Step 2 includes: Trigger the corresponding target audit process based on the target audit type; The audit data are grouped based on the attribution characteristics corresponding to the audit data to obtain multiple audit data groups; According to the preset audit sequence, the target audit process is controlled to perform intelligent analysis on the audit data groups and obtain the audit results corresponding to each audit data group.

9. The method for internal audit information of an enterprise according to claim 8, characterized in that: According to the preset audit sequence, the control target audit process performs intelligent analysis on the audit data group and obtains the audit results corresponding to each audit data group, including: Audit the business in the associated system based on the various project business information in the associated system; Audit the system operation and maintenance operations and system assets of the associated systems based on the background logs and software and hardware asset information of the associated systems; Audit the system information security of the associated system based on the security setting information and installation data of the associated system; Based on the user operation information within the relationship system, refer to the corresponding business management system requirements to audit the user's operation behavior.

10. The method for internal audit information of an enterprise according to claim 7, characterized in that: Step 3 includes: Based on the audit results, refer to the audit result template corresponding to the target audit type to generate multiple audit reports; Based on the data traceability labels corresponding to the various audit results, the matching communication protocols corresponding to the multiple audit reports are determined respectively, and the audit reports are sent to the result receiving end based on the matching communication protocols; Obtain the sending information of each audit report respectively, generate an audit log based on the sending information, and store it after setting the audit log authority; Among them, the audit log permission is prohibited from modification.

Images