Information Systems Auditing
About the Course
Learn to assess system reliability and technology controls from both an audit and a business perspective.
This course covers access rights, change management, application controls, backups, and service continuity.
You will practice defining engagement scope, gathering evidence, and analyzing exceptions before preparing professional findings that explain risks and proposed corrective action.
The course also explores how a technical action, such as granting access or changing a system setting, can affect the integrity of a financial or operational process.
Who Is This Course For?
- Internal auditors, information systems auditors, and IT control professionals.
- IT, information security, and operational risk personnel.
- Auditors and accountants working in environments that depend on information systems.
Topics covered:
- Defining information systems audit scope in relation to business risks and objectives, identifying systems, interfaces, and data that warrant closer examination.
- IT governance, policies, roles, and responsibilities, checking whether actual practices are consistent with approved documentation.
- General IT controls, user administration, access rights, and segregation of duties, reviewing access provisioning, changes, revocation, and monitoring of sensitive accounts.
- System development, change, testing, and approval controls before deployment, examining approval records, test evidence, and the handling of emergency changes.
- Application controls over inputs, processing, outputs, and interfaces, identifying points where data may be lost, duplicated, or incompletely transferred.
- Backups, recovery, service management, and technology suppliers, reviewing restoration test evidence and key obligations of external service providers.
- Gathering evidence and logs, analyzing exceptions, and assessing control adequacy, distinguishing a lack of evidence from evidence of ineffective operation.
- Preparing an audit program, findings report, and corrective action follow-up, linking each finding to business risk, supporting evidence, and the proposed response.
Book your course today!
Contact us to reserve your spot!