Transcription of Developing the IT Audit Plan
{{id}} {{{paragraph}}}
Developing the IT Audit PlanGlobal Technology Audit Guide (GTAG)Written in straightforward business language to address a timely issue related to IT management, control, and security, the GTAG series serves as a ready resource for chief Audit executives on different technology-associated risks and recommended practices. Information Technology Controls: Topics discussed include IT control concepts, the importance of IT controls, the organizational roles and responsibilities for ensuring effective IT controls, and risk analysis and monitoring and PatchManagement Controls: Critical forOrganizationalSuccessChange and Patch Management Controls: Describes sources of change and their likely impact on business objectives, as well as how change and patch management controls help manage IT risks and costs and what works and doesn t work in Auditing: Implications for Assurance,Monitoring, and Risk AssessmentContinuous Auditing.
To develop a risk-based audit plan, CAEs should first perform a companywide risk assessment. The proper execu-tion of an appropriate IT risk assessment — that is part of the overall risk assessment — is a vital component of compa-nywide risk management practices and a critical element for developing an effective audit plan.
Domain:
Source:
Link to this page:
Please notify us if you found a problem with this document:
{{id}} {{{paragraph}}}