What Will I Learn?

Assuring an organization’s governance Risk management, and control process requires all internal auditors to understand the role of technology within their organization and begin developing the basic IT knowledge to do their job. Successful completion of this course enables participants to bring IT into the scope of their auditing activities

Indicative Content

• 1. IT Controls Concepts
  
  

  1.1 Definitions and classification of IT controls

  1.2 Objective for IT controls

  1.3 Roles and responsibilities related to IT controls

  1.4 Assessing IT related risks

  1.5 Reviewing the frames of work of IT controls

• 2. IT Audit Planning
  
  

  2.1 Annual planning process

  2.2 Define IT universe

  2.3 Adoption of a formal control framework

  2.4 Perform risk assessment

• 3. Information Security
  
  

  3.1 The IT infrastructure

  3.2 Data security and information integrity

  3.3 Elements of an IT security program

  3.4 Assessing and monitoring IT security

• 4. IT General Controls
  
  

  4.1 Access management

  4.2 Auditing identifying and access management

  4.3 Disaster recovery planning business continuity management

  4.4 IT operations

  4.5 Complexity of the environment

• 5. Application Controls
  
  

  5.1 Application systems

  5.2 Application controls objectives

  5.3 Impact of IT general control on application controls

  5.4 Assessing application controls

  5.5 Integrated audits