Scribd
Upload
173 views

Auditing in CIS Environment - IT Audit Fundamentals

An IT audit examines an organization's IT systems to determine if adequate controls exist for gathering, storing, processing, distributing, and using information. Controls form a hierarchy and include policies, procedures, and activities. Controls help ensure reliability of financial reporting, compliance with laws, operational efficiency, repeatable processes, and system security. Elements of controls specify what the control activity is, how often it occurs, who performs it, what data or materials are used, and any evidence produced.

Uploaded by

Luisito
Copyright
© © All Rights Reserved
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
173 views

Auditing in CIS Environment - IT Audit Fundamentals

An IT audit examines an organization's IT systems to determine if adequate controls exist for gathering, storing, processing, distributing, and using information. Controls form a hierarchy and include policies, procedures, and activities. Controls help ensure reliability of financial reporting, compliance with laws, operational efficiency, repeatable processes, and system security. Elements of controls specify what the control activity is, how often it occurs, who performs it, what data or materials are used, and any evidence produced.

Uploaded by

Luisito
Copyright
© © All Rights Reserved
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
You are on page 1/ 9

IT AUDIT

FUNDAMENTALS:
INTRODUCTION TO CONTROLS AND
CONTROL TESTING
Auditing in CIS Environment – Topic 3
Introduction to IT Audit and Controls
Learning Objectives:
◦ Discuss IT Audit and Controls
◦ Discuss Controls Hierarchy
◦ Know the Reason for Controls and its Elements
◦ Discuss the Different Types of Controls and its examples
What is an IT Audit?
◦ To define
◦ An examination of an organization’s IT Systems to determine whether adequate compliance exists for such activities surrounding
the gathering, storing, processing, distributing and usage of information in those systems based on the organization’s objectives.

◦ IT audits only provide reasonable assurance regarding the completeness and accuracy of data in the IT systems.
What are Controls?
Controls Hierarchy
Reasons for Controls
◦ Reliability of Financial Reporting
◦ Compliance with applicable laws and regulations
◦ To achieve effectiveness and operational efficiency
◦ Achieve definable repeatable processes that improve consistency of operating results
◦ System Security
Elements of Controls
◦ Controls include:
◦ What the control activity is?
◦ Frequency of the control activity
◦ The delegation of the control activity to personnel or who performs the control activity
◦ When the control activity occurs?
◦ What data, reports, files, or other materials are used in performing the control.
◦ Evidence, if any, is produced as a result of performing the control

◦ Note: A process is not a control. The process supports the control. The Control Objective is not a control, but the
objective of the control. Testing is performed over the control.

You might also like