Class Capture: Week 08 – Audit Procedures Video

Class Slides: Week 08 – Audit Procedures

Audit Program Preparation Tool: IS Auditing Tools and Techniques – Creating Audit Programs

In our last class I mentioned an assessment that you will perform as a final project for the class. The company involved is CortTech, Inc. (any similarity with an existing entity is pure conicidence). Here’s a bit of information regarding the company and its IT organization, and a copy of the company’s IT change management policy.

Company Info: CoreTech, Inc

CTI IT Organization: CTI Org Chart

Change Management Policy: CTI Change Management Policy

We will dedicate this entire session to designing an audit procedure. We will use one of the most critical IT general controls: Change Management. In preparation for our class, I encourage you to read the following:

CISA Review Manual:

• Chapter 3 – Information Systems Acquisition, Development and Implementation
  • 3.10.1 Change Management Overview, pages 215 – 218.
• Chapter 4 – Information Systems Operations, Maintenance and Service Management
  • 4.2.7 Change Management Process, pages 260-261

COBIT 5 Enabling Processes:

• BAI06 Change Management