Understanding & Auditing Business Processes’ risks related to IT

Event dates: 28 Oct 2020, 29 Oct 2020

Overview

Description

Perspective of IT risks in Your Business Audits & ITGCs

 

Target Audience

Internal auditors wanting to understand IT and IT risks in their business audits.

 

Course Objectives

Data, cloud, network, security, outsourcing, internet and many others are mentioned everywhere as key risks for your business processes.

You as a business internal auditors are required to understand basics of those risks, detect these risks and identify key controls applicable even though not technical IT specialists.

Usually some testing is required on controls from Internal auditors they are called ITGCs (IT General Controls)

This training aims at situating those ITGCs in a risk for business perspective requiring from internal auditors some IT understanding, Business insights and Audit techniques as well.

 

Course Content

1/ Basic IT concepts and risks explained for Internal auditors

– The IT environment (Information systems and IT infrastructure)

– The IT architecture

– Networks

– Internet and the web

– Information and data

– Safety, logical and physical security and access management

– Cloud computing

– Outsourcing and ISAE3402

– Service management (SLAs)

– Performance management

– IT and IT risks frameworks in short

 

2/ IT General Controls to be included in your business internal audits

Based on IIA’s GTAGs (general technology audit guides) how to audit :

• Auditing Problem management

• Auditing Change Management Controls

• Auditing Privacy Risks

• Auditing Information Technology Outsourcing

• Auditing Identity and Access Management

• Auditing Business Continuity Management

• Auditing Risks linked to Information and Data

• Auditing Performance

• Auditing Service level management

 

3/ Lot of examples and exercises will illustrate the contents.

 

Continued Professional Education (CPE) 14

Duration 2 days

 

Prerequisites

None

English (in demand in French or Dutch).

 

Practical Information

This class will be held at the IIA Belgium office.

From 9.00 to 16:30, registration as from 8.30

Understanding & Auditing Business Processes’ risks related to IT

Internal auditors wanting to understand IT and IT risks in their business audits. Data, network, outsourcing, internet and many others are mentioned everywhere as key risks for your business processes.

Facilitator

About the facilitator

Patrick Soenen

IIA Bel facilitator

IIA Bel facilitator.