Course Description
In this course, students will learn the IT auditing life cycle, from information gathering, planning, testing, reporting and issue tracking, etc. Students will also learn the overall IT audit framework and methodology and how IT audit fits into the overall internal audit function. Students will also learn how to develop and implement risk-based IT audit strategies and objectives in compliance with generally accepted audit standards to ensure that the organization’s IT assets are adequately controlled, monitored, and assessed, and are aligned with its business objectives. Students will be introduced to basic audit techniques such as sampling methodology and approach, testing procedure developing, evidence gathers, finding analysis and write-ups, communication and escalation.
Course Objectives
- Develop and implement a risk-based approach in compliance with IT audit standards ensuring that key areas of IT are included.
- Design specific IT audits to verify whether information systems are protected, controlled and provide value to the organization.
- Obtain and assess audit evidence that is sufficient, competent, relevant and useful in achieving audit objectives.
- Analyze the information gathered to identify reportable conditions.
- Report the results of the audit to key stakeholders and make recommendations; effect change when necessary.
- Conduct follow-ups and prepare status reports to ensure that appropriate and timely actions have been taken by management.