IT Audit Explained
An IT audit or information technology audit is an examination of the working of the information technology infrastructure. This seeks to find out if there is proper working in the IT sector and if proper control is being maintained. These audits can be undertaken independently or in association with other forms of company audit such as financial audit, inventory audit etc. IT audit was formerly called EDP or Electronic Data Processing audit. The main purpose of an IT audit is to find out if the information system is working efficiently. It tries to find out if the information system is safeguarding assets, and working towards the overall development of the organization.
Although both IT audit and financial audit is directed towards the analysis of the working of the organization, there are various prominent ways in which these two differ. In case of financial audit, the auditor lays a lot of importance on internal control. It is primarily of importance because the auditor has to later extensively place reliance on internal control. As a result of this, the work of the auditor gets substantially reduced he does not have to make a detailed study of all the financial books while conducting the financial audit. On the other hand, the focus of IT audit is to find out the risks associated with the information assets and checking if there are adequate measures in force to eliminate or reduce these risks. An auditor tries to evaluate the information systems availability, its confidentiality and its integrity by answering certain questions. For example to check the availability, the auditor asks if computer systems would be available for business when it is required. The confidentiality can be checked by seeing if the information in the system can be accessed by unauthorized users. The auditor can satisfy himself regarding the integrity by checking if the information provided by the system is accurate, timely and reliable. An IT audit can take two forms it can be either of the form of a "general control review" or an "application control review".
There are three broad approaches to carry out an audit. They are technological innovation process audit, innovative comparison audit and technological position audit.
In the case of innovation process audit, the auditor tries to find out the risk profile of its new and existing projects by assessing the experience of the company in its chosen field, the industry and the market.
Comparison audit deals with analysis of the companies innovative abilities as compared to its competitors.
Technological position audit deals with reviewing the technologies needed by the business. It also classifies them in to one of the four categories of base, key, pacing and emerging.
The auditors who perform IT audit hold a very important responsibility and hence it is recommended that only people with the required skill should be appointed as the auditor. The person to be given the post of an auditor should have an adequate knowledge of information system along with this; he should also have a general understanding of the accounting principles. Apart from this it is always beneficial to appoint an auditor who has received the CISA (Certified Information Systems Auditor) credentials.
Source: Free Articles from ArticlesFactory.com
Related Tags: audit, it, explained
Gavin Sanderson owns and operates http://www.it-audit-resource.com. Learn more valuable information about IT audit by visiting http://www.it-audit-resource.com. Your Article Search Directory : Find in Articles
Recent articles in this category:
- Ringtones for Cell Phones 101
A ringtone is a sound file that is used on acellular or mobile phone. This smart idea was deve - Sony Reader PRS-505 Review - Is it Worth Your Money?
The Sony Reader 505 has become an attractively affordable ebook reader since the Sony Reader P - Prototyping knowledge: about an .STL file and how to save it?
Following are guidelines for exporting from typical CAD modelers:Most CAD systems, File Save a - Logitech Digital Video Security System
Since the dawn of time people have always been afraid of others coming into their cave, it's a - The History of GPS Technology
Normal 0 false false false MicrosoftInternetExplorer4 /* Sty - The Future of VOIP Technology
Normal 0 false false false MicrosoftInternetExplorer4 /* Sty - 10 Things You Need to Know About NY VOIP
Normal 0 false false false MicrosoftInternetExplorer4 /* Sty - Video Cameras
Today, video cameras are extremely affordable, very easy to use and offer high quality video a - Making Data Administration a Part of Your Small Business
At some point it will happen to every company no matter how big orsmall they are. System failu - How to Choose a New York VOIP Service Provider
New Yorkers know a good thing when they see it, and VOIP technology iscurrently taking the Emp
Most viewed articles in this category:
- Bluesnarfing
IntroductionBluetooth a short range wireless communication technology developed for use at home, off - Visibility Eto Erp and Six Sigma Profiled in Quality Digest
According to Stephen Carson, executive vice president for Visibility Corp., "Many project-based manu - Four Trends for Distributors: Facing the Forces of Change
The four definitive trends listed in the National Association of Wholesalers-Distributors' publicati - Gateway Laptop Review
You may consider the M255-E if you are thinking about purchasing a Gateway laptop. At first glance, - Ipod Buying Guide &Tips - Ipod, Nano, Shuffle
Buying Ipod is just like buying a piece of enjoy-ment. The first criteria is to buy something you w - Texas Cement Choose Batchmaster for Process Manufacturing Erp
BatchMaster Software, Inc. (www.batchmaster.com), a leading provider of ERP (enterprise resource pla - Industrial CRM Must be Preceded by Change Management
Entitled Smart Practices That Pay: Leveraging Information to Achieve Industrial Selling Results, thi - Canada's Cosmaceutical Wins With Batchmaster ERP
Cosmaceutical Research Lab, already the largest contract manufacturer for cosmetic products in weste - Science is the Real God
Every religion in the world claims that its particular God is almighty. However, there is nothing in - Still wondering what VoIP is about?
So what is VoIP? Internet telephony is a rapidly-growing phenomenon that shows no sign of slo