Audit

The IT audit process step by step: planning, risk assessment, control evaluation, testing and evidence, reporting and follow-up.

How to design and implement security controls: control types and functions, a risk-based design process, the CIS Controls, testing, metrics.

A guide to IT auditing standards and frameworks: ITAF, IIA standards, ISO 19011, COBIT, ISO 27001, NIST CSF and SP 800-53, SOC 2, PCI DSS, COSO and ITIL.

The seven IT infrastructure domains auditors use, from users to applications: what each covers, its main risks and the key controls to check in an audit.

What an IT audit is, why organizations need one, the main types, what it covers from governance to security, the procedure step by step.

What an investigative (forensic) audit is, when organizations need one, the scope, step-by-step process, how digital evidence is handled.

What a compliance audit is, who needs one, what it covers, and the step-by-step process from planning to follow-up, with examples like ISO 27001 and PCI DSS.

What an operational audit is, how it differs from financial and compliance audits, its types and scope, the procedure step by step, useful metrics.

What a financial audit is, who needs one, internal vs external and statutory audits, the audit process, types of audit opinions and the role of IT controls.

The consequences of non-compliance with laws like the DPDP Act, GDPR and PCI DSS: fines, lawsuits, lost licences, lost customers and personal liability.