07-08-2010, 11:25 PM
Hi all. We all know that IT has become backbone of businesses and organizations around the world. Equally important (thanks to SOX) it has become for the external auditors to verify the adequacy of Internal Controls Over Financial Reporting (ICOFR). SOX recommends using of accepted controls frameworks and its outcome has been that COSO and COBIT has become widely accepted control frameworks in internal controls and IT controls.
We know that audit firms conduct IT Audits for their clients to fulfill their assurance and compliance needs. These IT Audits cover IT Infrastructure from medium complexity to high complexity.
Now here are the burning questions---
1-How do these audit firms assess the complexity of IT Environment
2-How they actually conduct the IT Audit, "from Pre-Audit Planning to Audit Report"
3-When they go to a client for the actual IT Audit, what "document" they have in hand, based on which they formulate their IT Audit Checklist?
In short---How do they conduct IT Audit from the start to the end and what documents/checklists etc they possess to successfully carry out their IT Audit engagement?
Anyone who can answer and help?
We know that audit firms conduct IT Audits for their clients to fulfill their assurance and compliance needs. These IT Audits cover IT Infrastructure from medium complexity to high complexity.
Now here are the burning questions---
1-How do these audit firms assess the complexity of IT Environment
2-How they actually conduct the IT Audit, "from Pre-Audit Planning to Audit Report"
3-When they go to a client for the actual IT Audit, what "document" they have in hand, based on which they formulate their IT Audit Checklist?
In short---How do they conduct IT Audit from the start to the end and what documents/checklists etc they possess to successfully carry out their IT Audit engagement?
Anyone who can answer and help?
