Introduction to IT Audit

Course overview

Build an understanding of the essential principles and practices of IT audit and risk management. This course introduces the risks within IT environments, the controls used to manage them and the cybersecurity foundations that support effective technology assurance.

Who should attend

• —Internal auditors seeking to understand IT audit and assess technology risks and controls
• —Risk professionals seeking a foundation in IT risk management
• —Students, graduates and aspiring practitioners interested in IT audit and technology assurance

What you will learn

• —Understand the purpose and scope of IT audit and risk management
• —Recognise key IT environment components and how they support business operations
• —Identify and assess technology risks across systems, data, people and processes
• —Use essential IT terminology to engage technology teams and communicate risks
• —Understand IT general controls, including access management, system changes, backups and disaster recovery
• —Explain how automated input, processing and output controls support data integrity
• —Recognise common cybersecurity threats and identify appropriate safeguards

Learning approach

Practitioner-led sessions, group discussions and practical exercises help participants understand the concepts and apply them in realistic situations. The course is delivered over two sessions, with time to absorb the material and engage in practical activities.

Facilitator

Thomas Paavo Hamata | CISA | COBIT 2019 Foundation

Thomas has experience in IT audit, technology risk and compliance across financial services and international technology environments. He is an accredited ISACA trainer for CISA and COBIT and uses practical examples to make technical concepts accessible.