IT Audit & Compliance

What auditors check in entity-level controls: governance, policies, risk assessment, IT strategy and the overall control environment.

The IT audit process step by step: planning, fieldwork, testing controls, documenting findings, reporting and follow-up.

How to design and implement proper security controls: risk-based selection, preventive, detective and corrective controls, and testing.

IT auditing standards and frameworks explained: COBIT, ISO 27001, NIST, ITIL and more, and how auditors use them to assess controls.

The seven IT infrastructure domains to review in an IT audit, from user and workstation to WAN and system/application, and key controls in each.

What is an IT audit? Learn its scope, types and the procedure auditors follow to assess IT controls, security and compliance.

What is an investigative audit? When it is used, its scope, and the procedure for investigating suspected fraud or misconduct.

A compliance audit is an examination of an organization's adherence to laws, regulations, rules, standards, or policies. It is a systematic and independent assessment of an organization's operations, procedures, and…

What is an operational audit? Learn the types, scope and procedure used to assess the efficiency and effectiveness of operations.

What is a financial audit? Learn the types, scope and procedure of auditing financial statements, and what auditors look for.