Essentials of IT Auditing for the Non-IT Auditor

IT auditing is no longer just for specialists. Because IT drives the business, assuring governance, risk management and controls requires auditors to understand how IT works in their organization, and the line between IT and non-IT audits is fading outside highly technical areas.

This 60-minute course gives non-IT auditors and new information security professionals an overview of IS audit concepts, risks and concerns, globally recognized control frameworks, and the basics of planning and performing an IT audit. You'll also look at auditing IT governance, system acquisitions, development and implementation, business continuity and disaster recovery, and the IT audit tools available.

• Explain audit mandates, objectives and approaches for examining systems and IT infrastructure
• Identify risks and audit concerns in the IT environment
• Name globally recognized control frameworks for IT audit
• Describe general IT controls and application controls
• Examine the role of IT governance and its link to IT auditing
• Profile and manage risk in an IT audit
• Perform a basic IT audit and choose suitable tools and techniques

• Information system audit concepts, risks and concerns in the IT environment
• Globally recognized control frameworks for IT audit
• General IT controls and application controls
• Basics of how to perform an IT audit
• Auditing IT governance
• Auditing IS acquisition, development and implementation
• Auditing business continuity and disaster recovery
• Available IT and IS audit tools

Financial and operational auditors increasingly assess IT risks, governance and controls. This session gives them the baseline knowledge to perform a basic IT audit as part of their work, and helps IT auditors sharpen their grasp of general and application controls and how they relate to business processes.

It suits auditors in business services, financial, government, insurance and retail organizations.

Business Services
Financial
Government
Insurance 
Retail

Dr. Robert E. Davis obtained a Bachelor of Business Administration in Accounting and Business Law, a Master of Business Administration in Management Information Systems, and a Doctor of Business Administration in Information Systems Management from Temple, West Chester, and Walden University; respectively. Moreover, during his twenty years of involvement in education, Dr. Davis acquired Postgraduate and Professional Technical licenses in Computer Science and Computer Systems Technology. Dr. Davis also obtained the Certified Information Systems Auditor (CISA) certificate — after passing the 1988 Information Systems Audit and Control Association’s rigorous three hundred and fifty multiple-choice questions examination; and was conferred the Certified Internal Controls Auditor (CICA) certificate by the Institute for Internal Controls.

Since starting his career as an information systems (IS) auditor, Robert has provided data security consulting and IS auditing services to corporations as well as other organizations; in staff through management positions. Before engaging in the practice of IS auditing and information security consulting; Robert (as a corporate employee) provided inventory as well as general accounting services to Philip Morris, USA, and general accounting services to Philadelphia National Bank (Wells Fargo). Furthermore, he has prior experience as a freelance writer of IT audit and information security training material.

Dr. Davis received recognition as an accomplished, energetic auditor, author, and speaker with a sound mix of experience and skills in monitoring and evaluating controls. Based on his accomplishments, Temple University's Fox School of Business and Management Alumni Newsletter, as well as The Institute for Internal Controls e-newsletter featured Dr. Davis. Furthermore, he is an Advisory Board Member of The Institute for Internal Controls, the first and inaugural Temple University CISA in Residence and a founding Temple University Master of Science in IT Auditing and Cyber-Security Advisory Councilmen. Last, he accepted invitations to join Delta Mu Delta International Honor Society, the Golden Key International Honour Society, the Thomson Reuters' Expert Witness List, the IT Governance LTD expert panel, as well as the International Association of IT Governance Standards honorary membership group.