Operational IT Audit Based on COBIT & IEEE Standards

Audience

This course is for auditors, IT managers, project managers, consultants, infromation security staff, risk managers, procurement and purchasing professionals, and executive managers.

Prerequisites

Delegates should have worked on at least one major IT system in either a development, operational, procurement or audit capacity.

Duration

4 days. (Note: this course is available as a 2 day event focussed on any one individual module listed in Specialist Subjects.)

Course Objectives

The aim of this course is to enable delegates to conduct both high level and detailed audits into the non-coding activities of an IT operation including high level general practice, business continuity management, information security, software risk and software aquisition audits. It applies equally to in-house IT operations software houses, outsourcing installations etc. By the end of the course delegates will:

• be able to scope and tailor an IT audit to address operational issues
• know what complementary standards are available
• be able to model audits on international best practice
• be able to assess results based on documented evidence
• be able to create a remediation plan

Course Content

Creating the Audit
Benefits of an IT Audit
Standards available
Audit Questionnaires
Customising the questions

Specialist Subjects
High Level IT Functions including standards for COBIT 4.0 et seq,IEEE, ISO 27001, BS25999-2
Business Continuity Management based on BS25999-1 and BS 25999-2
Information Security based on ISO 17799 and ISO 27001
Software Risk Management based on IEEE software engineering standard 1540-2001
Software Acquisition audit on IEEE standard 1062-1998

Implementing the Audit
Scoring systems
Supporting evidence
Developing a Remediation Plan
Implementing the Remediation Plan
Continuous Improvement Programme