Answer:
An IT audit is a very specialized process requiring a specific skill set. If you have no experience or training in this area, you are probably not qualified to perform this effectively. I've been in bank auditing for 20 years and I would not consider myself qualified to perform an IT audit. I'd make a recommendation to management that they engage an outside consulting firm to co-source the audit with you. This will give you some practical experience under the oversight of a more experienced IT Audit professional.
If you can't get management to buy into that approach, you could start your research at the ISACA website. They have some good information. Also check with the Institute of Internal Auditors.
First published on BankersOnline.com 5/08/06
print
share