Auditing IT and Information Security Controls – Practical Approach also for non-IT Auditors

Kuvaus

The proven and sustainable approach to prevent and prepare for  IT incidents, including information security breaches and failing IT-project is to assure the appropriateness of IT  controls.

The objective of this training is to provide the basic knowledge for non-IT auditors to allow them to do also a basic IT audit during a financial or an operational audit. The COBiT V5 (Control Objectives for Information and related Technologies) framework will be discussed briefly to demonstrate the benefits which can be derived from using an authoritative control framework which is worldwide. When participants leave they will have a good grounding for IT and information audit fundamentals within an IT Governance approach.

This course will also benefit the IT-auditors to deepen their skills in general- and application controls. They will obtain a better understanding of a risk management approach and the appropriate required comprehensive control framework foundation. This will allow them to better evaluate and obtain assurance also for advanced technology controls, in order to mitigate all information related risks.

Agenda of the training:

•         IT Audit Overview: Managing the information and IT environment, IT governance based on the COSO foundation for Corporate Governance
•         General Controls, including business objectives as drivers for IT objectives, information related risk management, roles and responsibilities of key functions, management of IT and information security, hardware as well as software acquisition and maintenance , business continuity planning, incident management, operations management, change management , management of outsourcing
•         Application Controls throughout the information transaction life cycle
•         Testing internal controls with Computer Assisted Audit Techniques (CAAT’s)

Some comments received from previous trainings, when this course was held in Finland 2015 and 2016.

•         Thanks for organizing this training! This was, without no doubt, one of the very best trainings I’ve ever attended
•         Very good for me, not too IT-focused. Lecturer with views ++++. I can recommend for persons like me!
•         Best regards and thanks to Hendrik, excellent lecturer, inspiring!

In addition to lecturing, the course includes discussion and brief reflections to the handled themes in order to ensure efficient learning. The approach to the subject is practical and various real-life examples are presented in connection with the discussed topics. The course is held in English.

Trainer: Hendrik Ceulemans, CGEIT, CISA, MCA, MBA InfoGovernance bvba

Registrations by 1st of November 2017.