Information Technology Auditing

Catalog description

Determines relevant audit procedures at all stages of the IT audit process (i.e., risk assessment, review of controls, test of controls, and substantive tests). Examines information systems to ensure an integrated security approach of both physical and logical information technology (“IT”) controls. Plans and performs compliance tests for integrated security. Evaluates security risks, threats and attacks and develops appropriate tests to mitigate these risks. Understands prominent cybersecurity frameworks and emerging technology risks impacting the profession. Considers planning, performing, and reporting of SOC 1 and SOC 2 reports.