Plan audit to determine whether information systems are protected, controlled, and provide value to the organization.
Prepares detailed plans for performing individual audits including the identification of key risks and controls, determination of audit objectives, and development of an appropriate audit program.
Evaluate the organization’s management of IT policies and practices.
Evaluate the organization’s IT policies and practices for compliance with regulatory and legal requirements.
Evaluate the organization’s ability to continue business operations.
Evaluate whether IT supplier selection and contract management processes align with business requirements.
Conduct post‐implementation review of systems to determine whether project deliverables, controls, and requirements are met.
Evaluate whether IT service management practices align with business requirements.
Conduct periodic review of information systems and enterprise architecture.
Evaluate IT operations to determine whether they are controlled effectively and continue to support the organization’s objectives.
Evaluate IT maintenance practices to determine whether they are controlled effectively and continue to support the organization’s objectives.
Conduct audit in accordance with IS audit standards and a risk based IS audit strategy.
Communicate audit progress, findings, results, and recommendations to stakeholders.
Conduct audit follow‐up to evaluate whether risks have been sufficiently addressed.
Evaluate the IT strategy for alignment with the organization’s strategies and objectives.