Audit of information systems (SOX\COBIT)

The course is intended for IT managers who are responsible for the quality of services provided (Service Manager), and IT Solution Architects (Solution Manager, IT System Architect), IT auditors, to gain insight into best practices in conducting audits.

Open training

4 days
32 hours

Venue: online

Group: recruited

Program: standard

62 000 hrn
48 000* hrn
* promotional price is valid for a limited time

Corporate training

4 days*
32 hours

Venue: online or in your office

Group: members of your company

Program: takes into account the characteristics of the customer

* the number of days may vary depending on the customer's wishes
By arrangement*
* the price is formed depending on the needs of the customer

Closest events

No events available.

Features

Language: Ukrainian, English, Finnish, Arabic, Hebrew

Program: includes practical classes

Certificate: students will receive a certificate of attendance and additional materials in electronic form.

Coach Kochukov Andrey

Experience: 25+ years of teaching various management practices and business processes. Conducting audits of companies around the world and setting up their management solutions.

Education: ICI, Brussels, Belgium Faculty of Sociology, full-time. Specialty Sociology Ph.D. Diploma

For whom

The course is intended for IT managers who are responsible for the quality of services provided (Service Manager), and IT Solution Architects (Solution Manager, IT System Architect), IT auditors, to gain insight into best practices in conducting audits.

Programm

  • Planning an IT audit
  • Planning an IT audit
  • Definition of an internal audit
  • The purpose of an IT audit
  • IT audit strategies
  • What is an application
  • Programs and general controls
  • Overview of IT audit management
  • Categories of IT governance
  • Results of the audit
  • Creating an audit team
  • Fundamentals of information technology
  • Identification and classification of key control points in a modern IT environment
  • Basics of hardware architectures and CPU operation
  • Two different classes of computers
  • Software, programming and data processing
  • Distributed systems and client/server technology
  • Networking and security basics
  • IT system maintenance, change management and security
  • Strategies for auditing IT technologies
  • General controls and application controls
  • Logical security
  • Data classification
  • Logical access control: access to the system
  • Coding: access to information
  • Remote access, PCs and mobile devices
  • Information security management
  • Change management
  • The purpose of change management
  • Control of changes in programs
  • Managing the introduction of changes
  • Software licensing
  • Business continuity / disaster recovery
  • Business Continuity Planning / Disaster Recovery Plan (BCP / DRP)
  • Business Impact Analysis (BIA)
  • Disaster recovery strategy
  • Implementation of the action plan
  • Systems development technologies
  • Business application transactions
  • The purpose of an application audit
  • What is a transaction?
  • Application auditing is based on transactions
  • The life cycle of transactions
  • Application risk assessment factors