Skip to content

Information Technology Audit syllabus

MIT 50310 units · 45 topicsAcademic year 2083/84
Browse the units

Information Technology Audit

10 units

1. IT Environment and IT Audit (5 LHs)

  1. Concept of IT Environment
    1. Concept of IT Environment
    2. Auditing Profession
  2. Internal versus External Audit Functions
    1. Internal versus External Audit Functions
    2. IT Auditing
    3. IT Auditing Trends
    4. Need for IT Audit
    5. Role of IT Auditor
    6. IT Audit Profession
    7. IT Auditor Profile.

2. IT Audit Process (4 LHs)

  1. Audit Universe
    1. Audit Universe
    2. Risk Assessment
    3. Audit Plan
    4. Audit Process.

3. Tools and Techniques for IT Audit (8 LHs)

  1. Audit Productivity Tools
    1. Audit Productivity Tools
  2. System Documentation Techniques
    1. System Documentation Techniques
  3. Flowcharting and Flowcharting Techniques
    1. Flowcharting and Flowcharting Techniques
  4. Computer Assisted Audit Techniques (CAATs)
    1. Computer Assisted Audit Techniques (CAATs)
    2. CAATs for Sampling
  5. CAATs for Application Reviews, CAATs for Auditing Application Controls
    1. CAATs for Application Reviews, CAATs for Auditing Application Controls
  6. CAATs for Operational Reviews
    1. CAATs for Operational Reviews
  7. Auditing Around Versus Through Computer
    1. Auditing Around Versus Through Computer
  8. Computer Forensics Tools for Auditing
    1. Computer Forensics Tools for Auditing

4. IT Governance and Strategy (4 LHs)

  1. IT Governance
    1. IT Governance
  2. IT Governance Frameworks
    1. IT Governance Frameworks
  3. IT Performance Matrix
    1. IT Performance Matrix
  4. Regulatory Compliance and Internal Controls
    1. Regulatory Compliance and Internal Controls
    2. IT Strategy
  5. IT Steering Committee
    1. IT Steering Committee
    2. Communication
  6. Operational Planning
    1. Operational Planning.

5. Risk Management (4 LHs)

  1. Risk Management
    1. Risk Management
  2. Enterprise Risk Management
    1. Enterprise Risk Management
    2. Risk Assessment
    3. Guidance
    4. Insurance.

6. Application System Risks and Controls (6 LHs)

  1. Application System Risks
    1. Application System Risks
  2. End-User Development Application Risks
    1. End-User Development Application Risks
  3. Risks to Systems Exchanging Electronic Business Information
    1. Risks to Systems Exchanging Electronic Business Information
  4. Web Application Risks
    1. Web Application Risks
  5. Application Controls
    1. Application Controls
  6. IT Auditor’s Involvement
    1. IT Auditor’s Involvement.

7. Auditing Information System Operations (7 LHs)

  1. Operating Policy and Procedures
    1. Operating Policy and Procedures
    2. Data Processing
  2. Protection of Data Files and Programs
    1. Protection of Data Files and Programs
  3. Physical Security and Access Controls
    1. Physical Security and Access Controls
  4. Environmental Controls
    1. Environmental Controls
  5. Program and Data Backups
    1. Program and Data Backups
  6. Business Continuity and Disaster Recovery Plan
    1. Business Continuity and Disaster Recovery Plan
  7. Auditing End-User Computing
    1. Auditing End-User Computing
  8. Audit Involvement in Information Systems Operations
    1. Audit Involvement in Information Systems Operations.

8. Cybersecurity Audit (6 LHs)

  1. Cybersecurity Audit
    1. Cybersecurity Audit
  2. Internal and External Cybersecurity Audit
    1. Internal and External Cybersecurity Audit
  3. Types of Cybersecurity Audits
    1. Types of Cybersecurity Audits
  4. Common Cybersecurity Risks Audit
    1. Common Cybersecurity Risks Audit
  5. Risk-Based Approach in Cybersecurity Audits
    1. Risk-Based Approach in Cybersecurity Audits
  6. Compliance Frameworks in Cybersecurity Audits
    1. Compliance Frameworks in Cybersecurity Audits
  7. Tools for Network and Cybersecurity Audits
    1. Tools for Network and Cybersecurity Audits.

9. IT Audit Frameworks (4 LHs)

  1. COBIT
    1. COBIT
    2. COSO
    3. CIS
    4. NIST
  2. SOX IT Control Framework
    1. SOX IT Control Framework
    2. ISO/IEC 27001
    3. ISO/IEC

10. Laboratory Work

  1. Students will get hands-on experience through practical exercises that help strengthen…
    1. Students will get hands-on experience through practical exercises that help strengthen their understanding of information technology auditing concepts. This includes using various tools to perform an IT audit of IT-related resources like network devices
    2. operating systems
    3. web servers
    4. databases
  2. Servers and data centers
    1. servers and data centers
  3. End user computing devices and applications
    1. end user computing devices and applications
    2. cyberspace
    3. etc.