GTAG 12 Auditing IT Projects

《GTAG 12 Auditing IT Projects》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、IPPF–PracticeGuideGlobalTechnologyAuditGuide(GTAG)WritteninstraightforwardbusinesslanguagetoaddressatimelyissuerelatedtoITmanagement,control,andsecurity,theGTAGseriesservesasareadyresourceforchiefauditexecutivesondifferenttechnology-associatedrisksandrecommendedpractic

2、es.InformationTechnologyControls:InformationTechnologyOutsourcing:TopicsdiscussedincludeITcontrolDiscusseshowtochoosetherightITFkcloj^qflkconcepts,theimportanceofITcontrols,Qb`eklildvLrqplro`fkdoutsourcingvendorandkeyoutsourcingtheorganizationalrolesandcontrolconside

3、rationsfromtheclient’sresponsibilitiesforensuringeffectiveITandserviceprovider’soperation.controls,andriskanalysisandmonitoringtechniques.ChangeandPatchManagementAuditingApplicationControls:Controls:DescribessourcesofchangeChangeandPatchAddressestheconceptofapplication

4、ManagementControls:CriticalforandtheirlikelyimpactonbusinessAuditingOrganizationalApplicationcontrolanditsrelationshipwithgeneralSuccessobjectives,aswellashowchangeandControlscontrols,aswellashowtoscopearisk-patchmanagementcontrolshelpbasedapplicationcontrolreview.mana

5、geITrisksandcostsandwhatworksanddoesn’tworkinpractice.ContinuousAuditing:AddressestheIdentityandAccessManagement:ContinuousAuditing:roleofcontinuousauditingintoday’sCoverskeyconceptssurroundingidentityImplicationsforAssurance,IdentityandAccessMonitoring,andinternalaudi

6、tenvironment;theManagementRiskAssessmentandaccessmanagement(IAM),risksrelationshipofcontinuousauditing,associatedwithIAMprocess,detailedcontinuousmonitoring,andcontinuousguidanceonhowtoauditIAMprocesses,assurance;andtheapplicationandandasamplechecklistforauditors.imple

7、mentationofcontinuousauditing.ManagementofITAuditing:DiscussesBusinessContinuityManagement:IT-relatedrisksanddefinestheITauditDefinesbusinesscontinuitymanagementManagementofITAuditingBusinessContinuityuniverse,aswellashowtoexecuteandManagement(BCM),discussesbusinessris

8、k,andmanagetheITauditprocess.includesadetaileddiscussionofBCMprogramrequirements.ManagingandAuditingPrivacyRisks:Deve