Basic auditing techniquies for non-IT auditors

This workshop is designed to provide non-IT auditors a basic IT audit overview in 2 ways. 

This 2-day workshop is designed to provide non-IT auditors a basic IT audit overview in 2 ways:

Firstly it will explain some fundamentals about IT environment, its concepts, terminologies, and jargons that allow the non-IT auditors to at least speak/understand the same IT-language when dealing with the IT people.

Secondly, it will provide some common and generic IT audit techniques that they can use during fieldwork to ensure that the key IT risk areas and control measures are audited. This workshop will apply a mix of presentation, group discussion, practical exercises and case studies of international real-life experiences to help the participants understand better about IT audits thereby increasing their confidence level to audit IT systems.

Outline:

• An overview of IT department structure, who is who, their roles and responsibilities, and why IT department is organised this way.
• Introduction to IT environment, their system architecture, networks, IT security, terminologies, jargons, why and how they fit into IT organisation chart.
• An overview of System Development Life Cycle (SDLC).
• The role of IT Security Officer in the company.
• IT Auditor’s role in the IT world and why we need to perform IT audits.
• IT Audit Principles - CIA (Confidentiality, Integrity, Assurance) Model.
• Types of IT Audits - IT General Controls Audit, IT Technical Audit, Project Review and IT Application Controls Audit.
• Key IT Risk Areas from non-IT auditors perspective and what are the expected key control measures.
• Common IT audit weaknesses / Frauds.
• Case studies / practical exercises.