Download Brochure - MIS Training

More documents

Recommendations

Info

SEMINAR FOCUS AND FEATURES IT Audit School 26th - 30th May 2008, Lusaka, Zambia This five day course is designed for financial, operational and business auditors who need to update their technical and operational knowledge to audit information technologies and automated business systems. It is also ideal for those who are new to IT Auditing who do not have a background in IT. You will explore the controls required when auditing currently installed systems, new systems under development, and the various activities within the information technology department. In addition, you will learn techniques for auditing automated systems. Then you will turn your attention to auditing the management of application transaction activity, controls, and procedures. You will master techniques that can be applied to mainframe, distributed processing, and client/server-based applications. You will gain field-tested tools for identifying, recording, assessing and evaluating application controls and procedures. A detailed case study will provide step-by-step reinforcement of what you have learned, and you will leave this high-impact seminar with testing techniques, and audit findings. COURSE DIRECTOR CHARLES PASK, CISSP Charles Pask is the Managing Director of ITSEC Associates Limited, responsible for delivering global IT security and IT audit services, including public training courses, in-house training courses, conferences, symposiums, and consulting. Previously, he was a Director with MIS Training, and Director of Information Security Institute (ISI) European and Middle East e-Security Services. Mr. Pask has over 18 years experience in IT, IT audit, and IT security, and was the Information Security Manager for Alliance & Leicester plc prior to joining MIS. Mr. Pask has been a member of the ITSEC Common Criteria team working with the DTI, and a committee member of the APACS Security Advisory Group and the LINK Security Group. He has spoken at a number of conferences, including WebSec, Compsec, the International Security Managers Symposium, and various ISACA events. Prerequisites None Learning Level Basic Who Should Attend Financial, Operational, Business Applications, and External Auditors; New Information Technology Auditors ( However we recommend those with an IT background attend MIS “Making the Transition from IT to IT Audit.” ) Bonus Your fee includes a copy of the Handbook of Controls for Auditing Computer Applications and a copy of MIS' Information Technology & Audit Acronym Dictionary Fee GBP £2,195 EARN 37 CPEs IN-HOUSE TRAINING Save up to 50% on training when you run this course in-house In-house tailored training will enable you & your colleagues to make significant savings as we charge per day & not per participant so the cost remains the same regardless of how many people attend. We can offer any of our public courses or tailor them to your requirements. Training is available in all areas of Internal Audit, IT Audit, and IT Security If you have 6 or more colleagues who would be interested in one of our courses and you would like to make significant savings, contact us now; • What are your training objectives? • How many people require the training? • When would you like to run the training? • What level of experience do you and your colleagues have? • We will then email you a detailed proposal which addresses your unique needs. You will have complete control of the training content and decide when it is run. We guarantee that we will be able to cater for all your business needs. Email Guy Cooper at gcooper@mistieurope.com or call +44 (0) 20 7779 8975 now More Great Reasons to Choose our In-house Training: • Save money over public seminar fees • Save money on travel & accommodation • Save time on travel as the instructor will travel to you. Furthermore, the training can be held at the most convenient time for you. • Tailor the course content; ensure the relevance of the seminar for your colleagues. You can tailor the structure & methodology of your seminar or customise the seminar to meet the expertise levels of the participants. • Bring the best in the business; Instructors are hands-on, expert practitioners who are your subject matter consultants when they are not training. • Gain CPE points & certificates for the number of training hours.
AGENDA DAY ONE Fundamentals of IT Auditing ■ Objectives of IT Audit ■ Business risks in an automated environment ■ Information systems security concerns ■ Role of IT auditors and business auditors Auditing Standards ■ ISACA ■ The AICPA Guidance Statement on Auditing ■ SAS 55: consideration of the internal control structure in a financial statement audit ■ COBIT: control objectives for information and related technology ■ Sarbanes-Oxley Sections 302 and 404 compliance ■ PCAOB ■ GAO: government audit standards ■ IT standards Infrastructure Essentials ■ Computer hardware and operating systems ■ How application systems software and systems programmes interact ■ Distributed systems hardware ■ The translation process from source to executable ■ Audit risk in programme management ■ Analysing infrastructure risk “Straight to the point and hand out is wonderful.” Electricity Company of Ghana DAY TWO Databases ■ Non-database and database management environments ■ Database risks on the applications, the data, and the operating environment ■ Network discovery ■ Address spoofing: IP and MAC addresses ■ Malicious software ■ Unauthorised entry ■ Denial-of-service Distributed Systems ■ Comparing distributed systems to centralised systems ■ Fundamentals of client/server and its model ■ Server functions ■ Evaluating risk of distributed systems Networks ■ Host-based environments ■ LANs and WANs ■ Data communication basics and risks ■ Bridges, switches, routers, and gateways DAY THREE Internet and E-Commerce ■ Understanding Internet terms and concepts ■ Perimeter controls (firewalls) and security vulnerabilities ■ Assessing Internet-related risk ■ Confidentiality and authentication in e-commerce General Controls ■ Information technology infrastructure ■ Security, operational, management and system software controls ■ Identifying and assessing risk ■ Placing reliance on general controls Business Systems Applications ■ Types of business applications ■ How business applications affect the audit environment DAY FOUR Defining a Transaction ■ Transaction-based application auditing ■ Life cycle of a transaction ■ Transaction origination and authorisation ■ Processing, output, and input ■ Report distribution ■ Reconciliation ■ Error identification General Flow of an Audit Application ■ The business environment ■ The technical environment ■ Data risk assessment ■ Transactional flow ■ Test process Components of a Business Application ■ Transaction origination ■ Input ■ Processing ■ Output ■ Audit impact DAY FIVE Data Input and Processing Models ■ Characteristics and controls ■ Batch input: batch processing ■ Online input: batch processing ■ Online input: online processing ■ Real-time entry: real-time processing ■ Internet entry “Exactly what is needed for the performance of duties and incentive to take a profession examination” Scala ( West africa) LTD Application Controls ■ Categories ■ Differentiating controls from procedures ■ Completeness and accuracy of input and processing ■ Output controls and authorisation ■ Inter-relationship between application controls and general controls Beginning the Audit ■ Risk assessment factors ■ Quantifiable and lifiable factors ■ The opening meeting ■ Understanding the application “An extremely value adding course. Perfect input for my audit strategy.” Senior Internal Auditor, Ministry of Finance Planning & Econ Devt. © MIS Training 2008
Page 1: The International Leader in Audit a

Download Brochure - MIS Training

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?