Fundamentals of IT Audit for Operational Auditors - eBook

Cybersecurity and information technology (IT) issues are becoming a frequent topic for executive management, audit boards, and audit committees. They understand that failure to have the proper IT controls to protect confidential and sensitive data can result in fines, damage to reputation, loss of customers, business disruption, and financial loss. These concerns are driving the need for more IT audits, either by internal audit or external firms. The need for IT audits within an organization continues to grow as more processes are automated and risks associated with an organization’s use of emerging technologies increase (i.e., cloud, mobile devices, vendor applications). However, organizations generally have limited IT audit resources, and IT auditors are in high demand. All internal auditors should have a foundational understanding of IT. Internal auditors need to be prepared with the right business and technical knowledge, skills, and experience to successfully plan and execute an audit engagement. These competencies are so important that they are addressed in The IIA’s Code of Ethics, the International Standards for the Professional Practice of Internal Auditing, and The IIA’s Competency Framework.