Introduction to IT audit: Understanding & Auditing Business Processes’ risks related to IT

This course is essential part of the IT Audit Bootcamp. Learn more information here.

Overview

This training is tailored for internal auditors, providing them with essential knowledge and practical skills to understand and assess IT General Controls (ITGC) within the context of business risks. The course focuses on presenting the major IT general controls, ensuring participants can detect and identify key controls even without any technical knowledge.

Target Audience

This program is designed for internal auditors (IT or non-IT), internal controllers, risk managers, IT staff, seeking a practical understanding of ITGCs within the broader context of business risk. No advanced technical IT knowledge is required.

Course Objective

As internal auditors, you are required to understand basics of those risks, detect them and identify applicable key controls even if you aren’t a technical IT specialist.

IT General Controls (ITGC) are controls that apply to all systems, components, processes, and data for a given organisation.

This training aims to place these ITGCs in a business risk perspective, which requires internal auditors to develop an understanding of Information Technology, business insights and audit techniques.

Course Content

• Information and technology: introduction, IT governance and frameworks
• IT challenges and risks: IT risks
• IT planning & organisation: organisation structure, enterprise architecture, data management, third party management, innovation 
• IT controls: 
  • IT general controls (access management, change management, etc.)
  • IT solution life cycle: project management and development life cycle
  • IT operations: IT infrastructure, Network & client/server, ITIL service management: incident, business continuity, etc.
  • IT application controls, 
  • Integrated audit
• IT frameworks: ISO 27001 information security, CObIT, ITIL, etc.

Prerequisites 

None. Foundation course.

No advanced technical IT knowledge is required. 

Participants are encouraged to actively engage in quizzes, discussions, and practical exercises to reinforce their understanding of ITGCs within the broader context of business risk.