Mike Romeu
Week 13 – IT Audit Process – CSA
This week we had the privilege to host Mr. Chuck Fliehman who is the director of IT Audit at Teleflex. You may find his slides by clicking on the link below.
IT Audit Overview by Chuck Fliehman
I started to hear from a few of you regarding your final project. Don’t wait until the last minute to analyze the evidence. It will probably take you longer to write the report than understanding what the evidence says.
Happy studying.
Final Group Project – IT Change Management Audit
Objectives:
The objective of this project is to have you evaluate the effectiveness of IT change management controls at the CoreTech, Inc., Company. Based on the evidence that will be available, you are to form an opinion expressed in the form of an audit report.
This is a group project. Each group has their own datasets that they will work with. You can get a copy of your group’s dataset by clicking on the appropriate link in the table below.
I organized the groups based on the groups from our first project. Let me know of any changes in group composition right away… please.
| Group | Members | ||
| 1 |
|
|
G1 Program Listing |
| 2 |
|
|
G2 Program Listing |
| 3 |
|
|
G3 Program Listing |
| 4 |
|
|
G4 Program Listing |
| 5 |
|
|
G5 Program Listing |
You can download additional documents that you will need for the project by clicking on this Master Packet link.
To help you with your report you can download the following:
- IS Audit Report Template, and
- (Just as a reference in case you need it)
A separate packet with additional evidence will be made available as you progress through your audit.
Instructions:
- Download a copy of the Master Packet and your group’s dataset.
- Read and follow the IT Change Management Audit Procedure instructions.
Program listings for Quarter 2 and Quarter 3 of 2015 are in 2 separate tabs in the Excel workbook. The instructions in the procedure will help identify any program changes that may have occurred between the two quarters.
If you find any changes (which you should) that you want to look into further (which you should do as well) you must send me an eMail with the change request number(s). In return I will send you a copy of the change records for your review.
If in the course of your review you need more information from ‘management’ or any other resource I’ll be glad to meet with your team (or a representative) at a time that works for all.
(Hint: The population is your sample. There is no need to identify and apply sampling techniques. The information provided is in a format that allows for 100% testing of the data.)
The final report must be submitted via eMail to me no later than 11:59 PM December 16, 2015.
Best of luck.
Week 12 – IT Audit Process – Evidence and Reporting
Slides and video posted. Look for group project information in the next couple of days.
Week 11 – IT Audit Procedure – Sampling
Slides and Videos posted. I am also including the handout and material used during last week’s class.
Week 10 – IT Audit Procedure – Sampling
This will is all about sampling. To prepare for our class here are a few things for you to read.
Readings:
Articles:
- “What Every IT Auditor Should Know About Sampling,” by Tommie W. Singleton.
Standards and Guidelines:
- GS 2208 Sampling
Note: GS – General Standard; GG – General Guideline; PS – Performance Standard; PG – Performance Guideline; RS – Reporting Standard; RG – Reporting Guideline
CISA Review Manual:
- 1.6.13 Sampling
Additional Resources:
Don’t forget to bring with you the documents from last week. You can get them from last week’s post. We will be trying a few things using Excel.
