Chapter 1. The Information Systems (IS) Audit Process

Key concepts you will need to understand:

✓ ISACA IS Auditing Standards and Guidelines and Code of Professional Ethics

✓ IS auditing practices and techniques

✓ Techniques to gather information and preserve evidence

✓ Control objectives and controls related to IS

✓ Types of risk: IS, business, and audit risk

✓ How to determine an organization’s use of system platforms, IT infrastructure and applications

✓ Risk-analysis methods, principles, and criteria

✓ Audit planning and management techniques

✓ How to communicate the audit results

✓ Personnel-management techniques