Transcription of Developing the IT Audit Plan
{{id}} {{{paragraph}}}
Developing the IT Audit PlanGlobal Technology Audit Guide (GTAG)Written in straightforward business language to address a timely issue related to IT management, control, and security, the GTAG series serves as a ready resource for chief Audit executives on different technology-associated risks and recommended practices. Information Technology Controls: Topics discussed include IT control concepts, the importance of IT controls, the organizational roles and responsibilities for ensuring effective IT controls, and risk analysis and monitoring and PatchManagement Controls: Critical forOrganizationalSuccessChange and Patch Management Controls: Describes sources of change and their likely impact on business objectives, as well as how change and patch management controls help manage IT risks and costs a
To develop a risk-based audit plan, CAEs should first perform a companywide risk assessment. The proper execu-tion of an appropriate IT risk assessment — that is part of the overall risk assessment — is a vital component of compa-nywide risk management practices and a critical element for developing an effective audit plan.
Domain:
Source:
Link to this page:
Please notify us if you found a problem with this document:
{{id}} {{{paragraph}}}