OVERVIEW OF INFORMATION SYSTEM(IS) AUDITING
NORHAFIZAH BINTI ABDULMUDALIP
221601
YAP YONG TECK
228407
TAN YUAN JUE
226491
TAY QIU JIE
227495
GROUP MEMBER:
Data integrity
Supporttraditionalaudit
Goalsachievedeffectively
Law ®ulation
Safeguardsassets
Q: What is the demand for IT/IS auditprofessionals?
A: It is increasing. According to CNN Money, ITaudit is one of the fastest-growing professions, with22 percent to 30 percent growth estimated for 2008-2018. Organizations are looking for IT auditprofessionals to assess and recommend ways tomitigate the impacts of today’s technology risks.
•Accounting scandals in recent years point to a need for moremonitoring and oversight.
•So, as IT is becoming more complex and pervasive, the need forauditing is also on the rise. Thus, IT auditors are going to be indemand.
•The growth in information technology capabilities and the effects ofthe Sarbanes-Oxley Act and other legislation are driving demand forinformation technology auditors in public, private, non¬profit andgovernment sectors.
•Graduates may find jobs as information systems auditors or riskmanagers in the Big 4 accounting firms, risk managementconsultants in financial services industries.
•IT Governance - reviews of the organization’s fiduciary responsibility in satisfying the quality of ITdelivery services while aligning with the business objectives and establishing an adequate system ofinternal controls.
•Information Systems - focus on security controls of physical and logical security of the server includingadministration of server accounts, system logging and monitoring, and system backup.
•Integrated Audits - reviews of the business operations and their dependency of automated systems tosupport the business process. From the technology perspective, the audit focuses on applicationcontrols, administration of user access, application change control and backup and recovery to assurereliability, integrity and availability of the data.
•Control Self-assessments - Control Self-assessments are designed for department that manages andoperates a technology environment. These self-assessment tools can be used to identify potentialareas of control weakness in the management of the technology environment.
•Compliance - Compliance audits include Payment Card Industry(PCI), the Health Insurance Portabilityand Accountability Act (HIPAA), and any other applicable laws and regulations.
•Systems and Applications. To verify that systems and applications are appropriate,are efficient, and are adequately controlled to ensure valid, reliable, timely, and secureinput, processing, and output at all levels of a system's activity.
•Information Processing Facilities: An audit to verify that the processing facility iscontrolled to ensure timely, accurate, and efficient processing of applications undernormal and potentially disruptive conditions.
•Systems Development: An audit to verify that the systems under development meetthe objectives of the organization, and to ensure that the systems are developed inaccordance with generally accepted standards
•Management of IT and Enterprise Architecture: To verify that IT management hasdeveloped an organizational structure and procedures to ensure a controlled andefficient environment for Information Processing.
•Client/Server, Telecommunications, Intranets, and Extranets: An audit to verify thattelecommunication controls are in place on the client (computer receiving services),server, and on the network connecting the clients and servers.
•Technological innovation process audit. The audit will assess the length and depth ofthe company's experience in its chosen technologies, as well as its presence inrelevant markets, the organization of each project, and the structure of the portion ofthe industry that deals with this project or product, organization and industry structure.
•Innovative comparison audit. This audit is an analysis of the innovative abilities ofthe company being audited, in comparison to its competitors.This requires examinationof company's research and development facilities, as well as its track record in actuallyproducing new products.
•Technological position audit: This audit reviews the technologies that the businesscurrently has and that it needs to add. Technologies are characterized as being either"base", "key", "pacing" or "emerging".
Analyzes and interprets many different types of computeror information systems within a company or organization
Developing and maintaining a company’s informationsystems
Maintains and develops computerized audit software
Prepare and presents written and oral reports and other technicalinformation management
Follow up on audit findings to ensure that management hastaken corrective action
Ensure there is no fraudulent activity, unnecessary spending, ornon compliance with the laws and regulations
ISACA Certifications
Certified Information Systems Auditor (CISA)
Certified Information Security Manager (CISM)
Certified in the Governance of Enterprise IT (CGEIT)
Certified in Risk and Information Systems Control (CRISC)
