Cyber Security: Focus on IT Audit

• IT audit
  • What
  • Why
  • Types
  • Who
  • Parties involved
• What are the competencies required for an IS auditor?
• How frequently IS audits are conducted?

Are any tools used to conduct / manage IS audits?

• Audit planning
• Audit field work
• Reporting and remediation Plan
• Follow up and re-audit
• Closure

• Key elements of an IT setup (Technology)
• IT related job roles (People)
• IT Processes (Process)
• Linking People-Process-Technology

• Risk overview with examples
• Information Security overview
• Control objectives and controls
• Classification of controls
• Control categories
• Key and non-key controls
• IT Standards and Frameworks

• Audit initiation
• Scoping exercise
• Audit Schedule preparation
• Kick-off meeting
• Process flow
• Risk and control matrix
• Authorisation matrix
• Walkthrough
• Design effectiveness assessment
• Operative effectiveness assessment
• Population collection
• Sample selection techniques
• Evidence collection
• Testing techniques
• Testing and documenting
• Control failures and reporting
• Rectification and remediation
• Retesting and Closure

1. Change Management
2. SDLC
3. Release Management
4. Logical access management
5. Network Security management
6. Operating System Security Management
7. Physical access management
8. Data Centre management
9. Data Management
10. Operations management
11. Incidents and problems management
12. Business Continuity management
13. Asset management
14. Human resource management
15. End User security
16. Cloud Security management
17. Third Party management
18. IT application controls
19. Mobile Security
20. RPA Controls
21. IOT Controls

• SOX assessments
• SOC1, 2 and 3 assessments
• ISO 27001 audits

Insights

• Improving efficiency and effectiveness in audits
• Audit schedule planning and prioritisation
• Field work ways of working and prioritisation
• Correct usage of audit terminologies
• Clear communication with the other stakeholders
• Practical scenarios discussion
  • Control design failure
  • Control operational failure
• Key terminologies and definitions
• FAQs
• Probable interview questions