Information for the audit program was also obtained as necessary from the Institute of Internal Auditor’s GTAG (Global Technology Audit Guide) #12 ( Auditing IT. (From IIA Global Technology Audit Guide Auditing IT Projects). GTAG 28, 2, Project Plan and Approach, , Objective and scope, The scope of the project. Start studying GTAG Auditing IT Projects: Appendix A – Project Management. Learn vocabulary, terms, and more with flashcards, games, and other study.

Author: Faezragore Goltirg
Country: Republic of Macedonia
Language: English (Spanish)
Genre: Literature
Published (Last): 20 February 2013
Pages: 187
PDF File Size: 8.83 Mb
ePub File Size: 16.59 Mb
ISBN: 910-7-98083-168-4
Downloads: 59468
Price: Free* [*Free Regsitration Required]
Uploader: Takora

Auditing Information uaditing audit. Examples of general controls include the development and implementation of an IS strategy and an IS security policy, the organization of IS staff to separate conflicting duties and planning for disaster prevention and recovery. How the internal audit activity can actively participate in the review of projects while maintaining independence.

This article relies too much on references to primary sources. Trending Pulse of Internal Audit. Skip to main content. The auditors should not have direct involvement in the decision process in order to maintain their independence.

Insufficient attention to these challenges can result in wasted money and resources, loss of trust, and reputation damage. The methodology should cover, at akditing minimum, allocation of responsibilities,… 4. Auditing IT Projects Whether IT projects are developed in house or are co-sourced with third-party providers, they are filled with challenges that must be considered carefully to ensure success.

Include participation by each affected user department in the implementation phase of the project plan.


Back Establish and maintain project management standards. Mission of Internal Audit. Global Perspectives and Insights.

You may be trying to access this site from a secured browser on the server. It also suggests internal audit areas for investigation.

ITGC – Wikipedia

Management of security risk in information and information technology The organization should use Project Management techniques to verify that information technology security requirements are adequately addressed. GTAG 07 Information Technology Outsourcing 2nd Edition This guide projevts information on the types of IT outsourcing, the life cycle of IT outsourcing, and how internal auditors can approach risk in connection with this.

They can serve as a bridge between individual business units and the IT function, point out previously unidentified risks, and recommend controls for enhancing outcomes. Articles lacking reliable references from July All articles lacking reliable references. The framework and supporting method should be integrated with the programme management processes. The objectives of ITGCs are to ensure the proper development and implementation of applications, as well as the integrity of programs, data files, and computer operations.

Retrieved from ” https: Ask the resources team.

Ensure that the projects support the programme’s objectives. Whether IT projects are developed in house or are co-sourced with third-party providers, they are filled with challenges that must gtay considered carefully to ensure success. This guide describes the knowledge needed by organisations and internal auditors to address the effectiveness and impact of business recovery capabilities. Establish and maintain a system design project management framework.

This Control directly supports the implied Control s: Five key components of IT projects for internal auditors to consider when building an audit approach. AIs should establish a general framework for management of major technology-related projects. This guide is designed for chief audit executives CAEs and internal audit management auditlng who are responsible for overseeing IT audits.


Global Technology Audit Guide (GTAG) 12: Auditing IT Projects

Pg 8, Pg 20, Exam Obj 5. The organization shall manage the system development process by establishing efficient development methods, designating personnel to be responsible for the project, and implementing project management.

This article is about IT general controls. Types of project audits. GTAG 13 Fraud Prevention and Detection in an Automated World This guide is to inform and provide guidance to chief audit executives CAEs and internal auditors on how to use technology to help prevent, detect, and respond to fraud.

The organization shall auditingg the required verification, validation, inspection, monitoring, and test activities for the product and the product acceptance criteria during the product realization planning. Management of security risk in information and information technology Establish and maintain a project management framework that defines the scope and boundaries of managing projects, as well as the method to be adopted and applied to each project undertaken.

IT general controls ITGC are controls that apply to projectx systems, components, processes, and data for a given organization or information technology IT environment.