Auditing Application Systems

Training Duration:
2 days

Training Delivery Method:
On-site, instructor-led course; or online, instructor-led course

Prerequisites:
IT controls background, IT auditing background

What Problem Does This Training Help Solve?
Understanding auditing aspects of application controls from business process and application perspectives

Who Should Attend?
IT control professionals, IT auditors, IT security professionals, IT application developers, IT applications project managers, IT application system designers

Course Material:
Content-rich manual/course handouts consisting of about 300 foils

Course Syllabus:
This seminar is designed to provide participants with an understanding of auditing key risks and controls related to applications systems including business processes, application security, transaction integrity, balancing and reconciliations, as well as IT general controls that support critical aspects of application processing.

Topics to be covered:

• IT-GC and IT-AC
• Auditing applications systems and IT
• COBIT and application systems control objectives
• Understanding the life of an application transaction
• SDLC and application controls
• Controls: buy vs. build
• Applications and application controls
• Business centric application audit planning
• Data input controls
• Data processing controls
• Data output controls
• IT general controls and their affect on business applications
• DE and OE testing of application controls
• End-user applications and controls
• Art and science of audit sampling
• Frauds and application systems