Guidelines for Performing a Corporate-Wide Internal IT Audit Risk Assessment

A corporate-wide risk assessment can look daunting, but it becomes manageable with a solid template and brainstorming sessions with internal auditors, certified fraud examiners and business unit leaders.

This 90-minute internal IT audit risk assessment training shares a methodology used in the internal audit department of a billion-dollar-revenue corporation. You'll learn the key components of a risk assessment and management program, the steps in the process, and how to think through what could go wrong in any control environment.

You'll also see a template with examples of typical projects across departments, how to brainstorm projects unique to your industry, and how to keep refining audit projects during the audit year.

• Describe the key components of a risk assessment and management program
• Use a template to perform a corporate-wide risk assessment
• Brainstorm audit projects suited to your industry and departments
• Follow a proven methodology and its steps
• Refine audit projects throughout the audit year

• Key components of a risk assessment and management program
• A risk assessment template with examples of typical projects in various departments
• Brainstorming worthwhile projects unique to your industry
• The methodology for a successful risk assessment
• The steps in the risk assessment process
• Refining audit projects throughout the audit year

Understanding your company's risk environment is the basis of an effective internal audit function. A disciplined template and process make the annual assessment more efficient and effective.

This session suits internal audit staff and managers who perform the annual risk assessment, compliance and operational risk professionals, finance staff, external auditors, board and audit committee members, and department managers.

• Beginning Internal Auditors
• Compliance Professionals
• Operational Risk professionals
• Finance Professionals
• Board Members
• Internal Auditors
• External Auditors
• Audit Committee Members
• Operational Risk Managers
• Departmental Managers

Dr. Robert E. Davis obtained a Bachelor of Business Administration in Accounting and Business Law, a Master of Business Administration in Management Information Systems, and a Doctor of Business Administration in Information Systems Management from Temple, West Chester, and Walden University; respectively. Moreover, during his twenty years of involvement in education, Dr. Davis acquired Postgraduate and Professional Technical licenses in Computer Science and Computer Systems Technology. Dr. Davis also obtained the Certified Information Systems Auditor (CISA) certificate — after passing the 1988 Information Systems Audit and Control Association’s rigorous three hundred and fifty multiple-choice questions examination; and was conferred the Certified Internal Controls Auditor (CICA) certificate by the Institute for Internal Controls.

Since starting his career as an information systems (IS) auditor, Robert has provided data security consulting and IS auditing services to corporations as well as other organizations; in staff through management positions. Before engaging in the practice of IS auditing and information security consulting; Robert (as a corporate employee) provided inventory as well as general accounting services to Philip Morris, USA, and general accounting services to Philadelphia National Bank (Wells Fargo). Furthermore, he has prior experience as a freelance writer of IT audit and information security training material.

Dr. Davis received recognition as an accomplished, energetic auditor, author, and speaker with a sound mix of experience and skills in monitoring and evaluating controls. Based on his accomplishments, Temple University's Fox School of Business and Management Alumni Newsletter, as well as The Institute for Internal Controls e-newsletter featured Dr. Davis. Furthermore, he is an Advisory Board Member of The Institute for Internal Controls, the first and inaugural Temple University CISA in Residence and a founding Temple University Master of Science in IT Auditing and Cyber-Security Advisory Councilmen. Last, he accepted invitations to join Delta Mu Delta International Honor Society, the Golden Key International Honour Society, the Thomson Reuters' Expert Witness List, the IT Governance LTD expert panel, as well as the International Association of IT Governance Standards honorary membership group.