Practical Training to Become An IT Auditor

Practical Training to Become an IT Auditor

Module 1: Introduction

IT audit

• Role of IT in Financial Reporting Process

Module 2: IT audit types

• Financial audit
• Internal audit
• Attestation engagements

Module 3: IT controls

• Entity level controls
• IT general controls (ITGC)
• IT application controls

Module 4: IT General Controls Overview

• Access to programs and data
• Program change
• Program development
• Computer operations
• Documentation Considerations for General IT Controls
• Understand, Identify and Test Relevant General IT Controls

Module 5: Process of auditing information systems

• Policies
• Procedures
• Standards
• Guidelines
• Control objectives and controls

Module 6: IT audit process

• Audit planning
• Audit charter
• Planning considerations related to an audit of ICFR
• Auditing techniques
• Sampling methodology
• Walkthroughs
• Test of Design and Operating Effectiveness
• Design and control deficiency
• Remediation plan
• Audit report

Module 7: Risk management

• Information risk management overview
• Developing a risk management program
• Roles and responsibilities
• Implementing risk management
• Risk assessment
• Risk analysis
• Risk treatment options
• Recovery time objectives (RTO)
• Recovery point objectives (RPO)
• Service delivery objectives (SDO)
• Maximum tolerable outage (MTO)
• Third-party service providers
• Third-party service providers
• Risk monitoring and communication

Module 8: Sarbanes & Oxley Act (SOX)

• The need
• The Sarbanes-Oxley Act of 2002- an overview
• The Act and Effective Dates
• Companies and Employee Affected
• The Sarbanes-Oxley Act of 2002- key sections
• The players- SEC, PCAOB, EDGAR, SAG
• IT Controls and Sarbanes Oxley Act Relevance
• IT Controls and Sarbanes Oxley Act Relevance
• Meeting the Information Security Requirements
• Reports used to Validate SOX Compliant IT Infrastructure
• Reporting Weaknesses and Deficiencies
• Documentation Issues
• SOX and Security Monitoring
• SOX Testing and what to test
• Records Retention
• Real-time Disclosure

Course Method:

Interactive Instructor led online course ( Zoom – Interactive Instructor Led Course)

Who Can Attend the Course?

• IT System Professional
• Non-IT people
• Art college students ( Maths, Commerce)
• Programmers
• Network and Security professionals
• IT Managers
• Directors
• VPs
• Sales team