It Audit Brochure
It Audit Brochure
Performing an IT Audit
An Information Technology (IT) audit is an audit of The process of performing an IT audit is summarised In performing its IT audits, the Auditor-General’s
an organisation’s IT systems, operations and related in the five steps below: Office (AGO) also checks for compliance with laws,
control processes. It can be carried out in connection Government policies and standards.
with a financial statements audit, selective audit or
thematic audit. The objectives in an IT audit include:
1. Determine the
objective and scope of the IT
1. Evaluate audit
2. Evaluate 3. Ascertain
the reliability
effectiveness compliance
of data from
of IT controls with
IT systems
to ensure applicable
which have 2. Develop an audit plan
systems are laws, policies
an impact on
the financial
functioning as and to achieve the audit
intended. standards. objectives
statements.
IT Audit Process
Why are IT Audits important? 3. Gather information on
relevant IT systems, Where appropriate, AGO uses IT audit tools,
With the widespread use of IT systems and the large operations and related technical guides and other resources recommended
amounts of data stored on such systems, it is controls by ISACA (Information Systems Audit & Control
important that IT systems and the data stored within Association). All AGO IT auditors are required to
are reliable and secure. obtain the CISA (Certified Information Systems
4. Perform audit tests on key Auditor) certification.
Ascertain whether IT Ascertain whether IT IT controls,
systems are systems provide using Computer-Assisted
adequately protected. reliable information. Audit Techniques
(CAATs), where appropriate
Why do we conduct IT
Audits?
Ascertain whether IT
Evaluate the risk of 5. Report on the audit
systems are managed
data tampering and/or
data loss.
to achieve their findings
intended benefits.
IT Audit
Copyright (2020)
Singapore Press Holdings Limited