70 likes | 202 Vues
In this insightful session led by Karen Gilmore, Manager of Audit Assurance at Edith Cowan University, learn how to effectively set up an IT audit plan tailored for the higher education sector. Explore key concepts including identifying essential IT systems, available audit tools, and who should conduct the audits—whether in-house or through contractors. Gain insights into the types of audits, including traditional methods alongside IT controls and security testing, and understand real-world applications through ECU's experience with CAATs. Prepare for unexpected spin-off audits effectively.
E N D
ANZUIAG 2009 Adelaide Session 6: Auditing IT in the higher education sector Karen Gilmore, Manager: Audit Assurance ANZUIAG
How do you set up an IT audit plan? Karen Gilmore, Manager Audit Assurance, Edith Cowan University
IT Audit Plan - planning • What does IT audit mean to you? • Where do you start? • Are all key IT systems on your radar? • What audit tools are available to you?
IT Audit Plan – Who? • Who will undertake the audits? • In-house or contractor? • Brainstorm with: • IT section • IT lecturers • External Audit
IT Audit Plan – Type of Audit • Traditional audit plus IT controls auditing • IT security and controls testing • CAAT’s • What fits best?
IT Audit Plan • Seek and you shall find… • ECU experience using CAAT’s on AP and credit cards • What systems have you tested?
IT Audit Plan • Be prepared for • Spin off audits e.g. travel, vouchers & gifts • Be prepared to stop!