Course Information
Intermediate IT Auditing for Non-IT Auditors
Parking for SAO, Professional Development courses is in Garage B (1511 San Jacinto Blvd.). The Garage signage may read 1511 San Jacinto or Garage B. The elevator in Garage B is not reliable. If you are unable to walk the stairs, please contact the professionaldevelopment@sao.texas.gov for alternate parking arrangements. Handicapped parking is free at the meters around the downtown area.
A course coordinator will email you a parking permit prior to the course start date. A permit must be displayed or you will be ticketed.
Course Description
As a follow-up to the IT Auditing for Non-IT Auditors course, IT Auditing 201 focuses not only on an overview of IT Auditing but a deeper dive of understanding testing and general compliance.
Course Objectives
Objectives:
• Understanding of the basics of IT Auditing, including key terms and acronyms
• Learn the importance of the IT risk assessment and integration with the audit risk assessment
• Understand the difference between application controls and general controls and how to identify each
• Understand what to look for and how to test general and application controls
• Applying critical thinking skills throughout all facets of the IT Audit process
Outline:
I. Introduction and Background
a. Background
b. Topics to Cover
II. IT Risk Assessment
a. Heat Maps
III. IT Audit Planning
a. Determining Key Risks by Audit Type
b. Critical Thinking throughout the Planning Process
IV. General Computer Controls (GCC’s)
a. Information Security
b. IS Operations
c. Application System and Maintenance
d. Database Implementation and Support
e. Network Support
f. System Software Support
g. Testing Security by System Type
V. Pre- and Post-Implementation Audits
VI. Auditing Application Systems
a. General Areas of Risk Auditing Application System Approach
b. Application Configuration
c. Other Areas
VII. Testing General Computer Controls
a. Ways to Test
b. Testing by GCC Type
VIII. Auditing Security
IX. Testing Applications Systems
a. Way to Test
b. Testing by Application Control and System Type
X. Segregation of Duties
XI. Spreadsheets
Prerequisites
IT Auditing for Non-IT Auditors course
Instructors
Danny M. Goldberg is a well-known speaker on internal auditing and People-Centric Skills. Danny co-authored People-Centric© Skills: Communication and Interpersonal Skills for Internal Auditors, via Wiley Publications. This is the first book published specifically to address the wide-ranging topic of communication skills for internal auditors. It has been offered through the IIA and ISACA bookstores since July 2015 and has sold over 3,000 copies (through April 2018).
Danny has over 21 years of professional experience, including five years leading/building internal audit functions. Danny was named as one of the Fort Worth Business Press 40 Under 40 for 2014. Danny is also accredited as the Professional Commentator of the Bureau of National Affairs - Internal Audit: Fundamental Principles and Best Practices (Professional Commentator). This book was authored by renowned audit scholars Curtis C. Verschoor and Mort A. Dittenhofer – co-author of Sawyer’s Internal Auditing.
Additional Information
TAC Rule 523.142(g) requires the CPE Sponsor to monitor individual attendance and assign the correct number of CPE credits. Participants will be asked to document their time of arrival and departure in compliance with this Rule. Additionally, attendance will be monitored throughout the day and CPE certificates will reflect actual attendance of each participant.
If you are making travel plans to come to Austin, we recommend making "refundable" air and hotel reservations or waiting until 14 days before the class to actually book your reservations. Courses are occasionally canceled or rescheduled due to low enrollment. We determine whether a course has enough participants 16 days prior to the course date. If we cancel or reschedule, we will email the participant and his or her billing contact no later than 14 days before the original class date.
To see answers to our Frequently Asked Questions, visit Texas State Auditor's Office - Professional Development FAQs