Information Systems and Technology Audit

Information systems and technology are at the core of modern organizations, supporting financial reporting, operations, customer services, and strategic decision-making. As reliance on technology increases, so do the risks related to system security, data integrity, availability, and compliance. Internal auditors and assurance professionals are therefore expected to understand how technology works, how it is controlled, and how it should be audited.

The Information Systems and Technology Audit (Intermediate) course is designed for professionals who already have a basic understanding of audit or risk concepts and want to strengthen their ability to audit IT environments.

Within BOOST, this program focuses on practical IT audit knowledge that can be applied to real systems, processes, and control environments.

The course emphasizes how technology supports business processes and how risks arise when systems are poorly designed, configured, or managed. Participants will explore common IT risks, general IT controls, application controls, and the role of IT governance. The program also highlights how IT audit integrates with business process audits and supports overall assurance objectives.

By the end of the course, participants will be better equipped to plan and perform IT audits, communicate findings clearly, and contribute to stronger technology governance and control environments.
 

•    Understand the role of IT audit in organizational assurance
•    Identify key risks associated with information systems and technology
•    Understand IT governance and control frameworks at a practical level
•    Evaluate general IT controls and application controls
•    Support IT audit planning and risk assessment
•    Recognize common control weaknesses in IT environments
•    Communicate IT audit issues effectively to management
•    Integrate IT considerations into business and operational audits