Analyst: IT Governance, Risk and Compliance Auditing

Curriculum

MODULE-1: Fundamentals of IT Auditing
This module is designed to provide the participants with in-depth knowledge and experience of Technology and audit, Control objectives and risks, Batch and online systems, Programming computers, Database systems, Computer risks and exposures, Computer security, Application systems and their development, and Computer operations control.

MODULE:2: Auditing Database Structures
The module will cover Database types – Sequential, Hierarchical, Network, Inverted File Structures, Relational Models, Control opportunities in a database environment, Database tools and techniques, Auditing IMS; IDMS; ADABAS; DB2; DATACOM; Oracle; Access.

MODULE-3: Audit use of CAATs
The module will cover the areas like System testing techniques, Computerized application systems, Non-computerized systems, CAAT types, Source code review, Use of Test Data, Parallel Simulation, Integrated Test Facilities, Snapshot Techniques, SCARF, Retrieval Software, Generalized Audit Software, Specialized Audit Software, Utility Software, ACL, and IDEA.

MODULE-4: Auditing Contingency Planning
The module will cover What is a Disaster? What is a Disaster Recovery Plan? Who is Accountable? What are the Options? What is the cost? How can a C.P. be tested? What is Management's Role? What is the User's Role? What is the Information Services Role? What is the Internal Auditor's Role?

MODULE-5: IT Fraud and Countermeasures
The module will cover the areas like the nature of computer fraud, the Corporate risk profile, Computer fraud techniques, why computer fraud and who commits it? Fraud auditing, Fraud awareness, EDI and fraud, the expectation gap, Forensic auditing, Sources of evidence and audit tools, Legal evidence and Reporting sensitive issues.

MODULE-6: Advanced IT Audit Risk Analysis for Auditors
This module will cover Risk and its nature in a corporate environment Risk analysis and Internal Auditing, The use of Risk-based auditing as an integrated approach, Risks within computer systems, Electronic trading risks, The IT Risk-based audit approach, Risk and materiality, A structured approach to audit risk evaluation, How to sell Risk-based audits.

MODULE-7: Securing the Internet
The module will cover Internet Threats, Protection Strategies, Internet security and privacy, Use of Digital Certificates, Client-side Security, Downloading threats, Firewalling and encryption, Formulating an Internet security plan.

MODULE-8: IT Security Reviews
The module will cover Computer risk areas, Criteria for effective security, Computer