INTRODUCTION TO INFORMATION SYSTEMS & INFORMATION TECHNOLOGY AUDITING

 Duration:  5 Day Workshop

Course Overview

This 5 day intense Introduction to IS & IT Auditing workshop provides a comprehensive understanding of IS & IT Auditing from understanding the business environment, planning the IT audit, audit programs, documenting field work, and findings, reporting and follow-up. It provides delegates with practical knowledge and skills to perform value-add IS & IT Audits that adds-value to business and grabs the much needed attention of Senior Executives, Audit & Risk Committees and the Board. The workshop will be interactive and participatory in nature. Delegates will have a number of practical exercises, including designing and audit plan using a project scheduling tool and produce a draft audit report template. Delegates will receive supporting documents and checklists.

What to expect from the course?

• Provide an introduction to the role of the IS & IT Auditor
• Provide an introduction to the five domains of the Certified Information Systems Auditor (CISA)®
• Provide an understanding of the CISA® tasks and knowledge areas
• Provide the knowledge to plan an IS or IT audit
• Provide the knowledge to execute an IS or IT audit
• Provide the knowledge to write an IS or IT audit report

Who should attend?

• Audit and Risk Committee Members
• Audit Executives
• Compliance officers
• Governance officers
• Internal audit officers
• IS & IT Audit Consultants
• IS & IT Security officers
• IS & IT Steering Committee Members
• Legal officers
• Risk and Audit Committee Members
• Risk officers

COURSE CONTENT

Day 1:  The work of the IT Auditor The CISA® Job Practice Domains

Morning Session

Welcome and introduction

• Workshop Objectives
• Administrative arrangements
• Overview of the Agenda

1.  CISA® Domain 1—The Process of Auditing Information Systems (21%)

• Task statements -5
• Knowledge statements – 11

2.  CISA® Domain 2—Governance and Management of IT (16%)

• Task statements – 10
• Knowledge statements – 17

3.  CISA® Domain 3—Information Systems Acquisition, Development and Implementation (18%)

• Task statements – 7
• Knowledge statements – 14

Afternoon Session

4.  CISA® Domain 4—Information Systems Operations, Maintenance and Service Management (20%)

• Task statements – 10
• Knowledge statements -23

5.  CISA® Domain 5—Protection of Information Assets (25%)

• Task statements – 6
• Knowledge statements – 26

Day 2:  Planning an IT Audit

Morning Session

6.  Morning Quiz

7.  Planning Phase

• Determine audit subject
• Define audit objective
• Set audit scope
• Perform pre-audit planning
• Determine procedures

8.  Fieldwork and Documentation Phase

• Acquire data
• Test controls
• Issue discovery and validation
• Document results

Afternoon Session

9.  Reporting Phase

• Gather report requirements
• Draft report
• Phase One—Preparing to Write
• Phase Two—Writing the Report
• Phase Three—Finalising the Report
• Other Considerations for Report Distribution
• Issue report
• Follow-up

Day 3:  Executing the IT Audit

Morning session

10.  Morning Quiz

11.  Initiate Audit execution

• Allocate specific tasks
• Engage audit stakeholders

12.  Monitor Audit execution

• Manage change requests
• Manage issues
• Monitor scope and quality

13.  Communicate Audit progress

• Audit team meetings
• Client progress meetings

14.  Conclude Audit execution

• Validating audit deliverables
• Approval to initiate next phase

Afternoon Session

15.  Audit panning and progress monitoring using a Project Scheduling approach

• This is a practical session which entails the use of a project scheduling tool

Day 4:  Writing the IT Audit Report

Morning session

16.  Morning Quiz

17.  Writing the IT Audit Report

• Objectives of Audit Reporting
• Report Value
• Types of IS Audit Reports
• Types of Audit Engagements
• Identifying and Understanding the Users of the Report
• Compliance with Auditing Standards
• Communication Factors
• Key Success Factors
• Length and Content of an IS Audit Report
• Using the IS Audit Report Template

Afternoon session

18.  Writing the IT Audit Report (Part 2)

• Constructing Well-written IS Audit Reports
• Report Drafting Process
• Including Additional Information
• Final Editing, Review and Approval
• Subsequent Events
• Disclosures
• Compliance With Legal Requirements
• Communicating Possibility of Illegal or Fraudulent Activity
• Issuing Separate Confidential Reports
• Meeting Future Reporting Expectations

Day 5:  Putting it all together

Morning session

19.  Final learning assessment

20.  Workshop closure activities

• Personal action plan
• Workshop evaluation and feedback
• Recognition of achievements