This site uses cookies to provide you with a more responsive and personalised service. By using this site you agree to our use of cookies. Please read our cookie notice for more information on the cookies we use and how to delete or block them.

Bookmark Email Print this page

IT audit fundamentals

About this course

This one-day interactive course will use case studies and provide other reference materials to outline the Information Technology (IT) risks that may affect your organization’s ability to achieve its goals. In addition to reviewing the basics of general computer control concepts and application controls, this course will explain how to plan and execute an IT audit.

Who should attend

  • Junior IT auditors and any level of business process auditors and internal audit managers interested in learning the fundamentals of IT auditing
  • IT professionals interested in learning about IT audit

Learn how to

  • Identify the basic IT infrastructure components and applications relevant to an audit
  • Identify common IT risks
  • Develop a work program testing the design and operating effectiveness for general computer controls and application controls
  • Scope, plan, perform and report for an IT audit

Course content

This one-day course will teach you:

  • How to identify areas of general computer controls and related IT risks and controls
  • The impact and importance of general computer controls and application level controls to an organization, including their relationship to operational and financial statement objectives
  • Strategies for scoping and planning an IT audit that links to identified areas of risk
  • How to design and execute an IT audit test
  • How to prepare fieldwork and working papers
  • Techniques for reviewing, concluding and reporting on IT audit results
  • Overview of applicable frameworks, including COSO, COBIT, ISO 17799 and ITIL
  • Information about other current topics, such as continuous controls monitoring and how to benchmark/baseline application controls

Prerequisites

None