A ground-up introduction to the IT auditor role: how technology risk gets identified, tested, and reported inside an organization. Covers infrastructure, databases, and the operational procedures auditors are hired to review.

Modules

Introduction to IT Auditing

Lessons

• What an IT Auditor Actually Does Preview
• Types of IT Audits You’ll Encounter
• Skills That Separate Strong Auditors From Weak Ones

IT Infrastructure Fundamentals for Auditors

Lessons

• Networks and Perimeter Controls
• Servers, Endpoints, and Patch Management
• Backup and Disaster Recovery

Database Systems and Controls

Lessons

• How Auditors Think About Databases
• Data Integrity and Validation Controls
• Database Change Management

Operational Procedures and Risk Management

Lessons

• Identifying Technology Risk
• Operational Procedures Worth Auditing
• Building a Risk-Based Audit Plan

Audit Methodology and Documentation

Lessons

• Planning an Engagement
• Gathering and Documenting Evidence
• Drawing Conclusions and Rating Findings

Reporting and Continuous Improvement

Lessons

• Writing Audit Reports People Actually Read
• Following Up on Remediation
• Continuous Improvement in Auditing