This one-day course is conceived for newly appointed IT auditors or compliance managers. We give an overview of risks, standards and regulations, market tools, pitfalls to avoid and discuss how to plan and manage an audit mandate.
TOPICS COVERED :
Workshop 1 - IT standards and audit interdependencies
- IT risks overview
- Main IT regulations, compliance and standards on the market- Different types of IT audit
- Gateways between IT standards, regulations and reuse of IT controls results
- Interdepency with Financial audit, audit of financial systems
Workshop 2 - Key IT controls
- Overview of IT controls
- Segregation of duties in IT
- Access control
- Change Management
- Test, Dev and Production environment controls
Workshop 3 - IT audit approach
- Planning and coordinating an IT audit
- Roles and responsibilities of Business and IT
- Risk analysis
- Audit tools
- Pitfalls to avoid
- Evidence management and test strategy
- Third-Parties management
- Contradictory review and findings presentation
COURSE OBJECTIVE :
Optimize effort in planning IT audit mandates and anticipate issues. For non-IT auditors, get a broad understanding of IT audit requirements.
Audit and Compliance of Information Systems
Duration : 1 day. or 4 x 2 hours-visioconferences
Language : English
Date : 19 January 2018
AUDIENCE
IT Auditors, Audit Coordinators, Compliance Teams
Breakfast and lunch buffet included.