GTAG 4 CoverGuide 4: Management of IT Auditing
There is no question that IT is changing the nature of the internal audit functions. The risks companies face, the types of audits that should be performed, how to prioritize the audit universe, and how to deliver insightful findings are all issues with which chief audit executive (CAE) must grapple. The purpose of this guide is to help sort through the strategic issues regarding planning, performing, and reporting on IT audits. It covers how to:

  • Define IT
  • Evaluate IT-related Risk
  • Define the IT Audit Universe
  • Execute IT Audits
  • Manage the IT Audit Function
  • Emerging Issues

This guide is designed for CAE and internal audit management personnel who are responsible for overseeing IT audits. It is meant to provide pragmatic information in plain English, with specific recommendations that a CAE can implement immediately. Further consideration is given to providing questions that a CAE can ask to help understand if his or her IT audit function is a high performer.

Author
Michael Juergens, Principal, Deloitte & Touche LLP
Contributing Author
David Maberry, Senior Manager, Deloitte & Touche LLP

Download this guide (PDF, 380KB).
Download the PowerPoint presentation (PPT, 405KB).
Purchase the printed version.
Download form for permission to translate to another language (PDF, 20KB).

The Institute of Internal Auditors • 247 Maitland Avenue • Altamonte Springs, Florida 32701-4201 USA
+1-407-937-1100 • Fax +1-407-937-1101 • www.theiia.org • Copyright 2008