INFORMATION TECHNOLOGY AUDIT : IT-AUDIT PRACTICE
INFORMATION TECHNOLOGY AUDIT: IT-AUDIT PRACTICE
Aryaduta Hotel Semanggi / Harris Hotel Jakarta | 18 – 20 Januari 2012 | 08.30 – 16.30 | Rp 5.150.000,-
BACKGROUND
The IT Audit course is designed to provide practical view in conducting IT audit and assurance in one organization. The course is designed to support professional staffs to expand their understanding of information technology (IT) audit.
The course presents a more in-depth view on the fundamentals of IT auditing by highlighting on topics such as: IT audit and control analysis, examination of control evidence in conducting IT audit, application control, and management of IT audit. The course will include discussion and exercises related to general control examinations and application system auditing. The course will also focus on control research and analysis for IT-related topic areas. In addition, through discussion and exercises, students will gain a working understanding of the process of developing audit work programs.
Participants will be expected to gain a working understanding of how to identify, reference and implement IT management and control policies, standards and related auditing standards. Regarding the latter, the objective is to learn how to identify and interpret the requirements of the standards and. implement the standards in auditing process.
Each class session will include discussion on an IT audit management, security, control or audit issues that participants should be familiar with.
OBJECTIVES
At the completion of this course, the participants should be able to :
- Participants shall obtain an expanded understanding the role of IT auditors in evaluating IT-related operational and control risk and in assessing the appropriateness and adequacy of management control practices and IT-related controls inside participants’ organization
- Participants shall obtain the capability in conducting IT audit and implement techniques in performing assurance, attestation, and audit engagements
- Participants shall obtain an expanded familiarity with the principle references in IT governance, control and security as related to IT audit
- Participants shall obtain the working ability to plan, conduct, and report on information technology audits
- Participants shall obtain an understanding of the role of IT auditors regarding IT-related compliance and regulatory audits, such as evaluating control standards?
TRAINING SYLLABUS
(1)-Introduction to Information Technology Audit :
The class session will focus on IT audit concepts and processes, which includes: review of some of the key fundamentals of IT auditing, including general auditing standards, risk-based auditing, pre-audit objectives, determining scope and audit objectives, and the process of performing an IT audit.
The class session will include discussion on IT performance, controls, control self-assessment, risk analysis, and the objectives of the IT audit or assurance report.
(2)-Conducting Information Technology Audit
The class session shall describe on practical methodology in conducting the effective and efficient IT audit, expand upon the need for appropriate controls and assurance processes for business and IT environment. The participants will be geared toward gaining a working understanding of the content and value of the management guidelines and assurance methodology. Discussion will focus on the importance of measurement in achieving organizational and IT objectives.
The session will also focus on the business and IT environments subject to operational and control assessments (audit).
(3)-Management Controls
The session will provide an overview of the control model such as: internal control, control analysis methodology from the Closing the Loop Framework, identification of business processes, considerations regarding materiality, and the assessment of IT value by which all these tools will be used assessing the appropriateness of IT processes.
The class session will also expand upon the audit process by providing methodology for developing audit strategies and developing audit work programs with reference to best practices (CobiT, BS 17799,etc). In this regard, the participant will cover organizational structure, accountability, role of the IT steering committee and oversight functions, and method for ensuring that appropriate policies and procedures are in place.
(4)-Application Controls
The class session will expand upon the requirements for application system audits, use of audit software, and IT service delivery. From an audit perspective, the objective is to provide assurance that application systems have integrity, and that IT service management practices will ensure the delivery of the level of services required to meet the business organization’s objectives.
Topic areas will include such as: types of application systems, application control assessment, evaluating IT service agreements, problem management, help desk functions, and network standards.
(5)- Evidence Collection and Evaluation
The class session will expand the methods in conducting the evidence collection, evaluation and reporting which cover the observed processes, documentary audit and analysis of evidence using appropriate tools such as: sampling, CAAT, and etc. The participants will be driven towards having the capability in conducting effective evidence collection and evaluation which are essential
(6)- Managing the IT Audit Function
The class session will focus on management issues regarding how to manage IT audit and assurance functions. The class material will include developing and assessing staff knowledge and skills, competency measurement, assignment of staff, documentation and continuing education requirements. Discussion will be on best approaches for involvement in professional organizations, obtaining certifications, and professional development.
The class will also focus on the key issues surrounding audit and assurance engagements, such as establishing auditee/auditor protocols, oral and written communication requirements, engagement administration, and follow-up requirements.
TRAINING METHOD
Pelatihan ini menggunakan metode interaktif, dimana peserta dikenalkan kepada konsep, diberikan contoh aplikasinya, berlatih menggunakan konsep, mendiskusikan proses dan hasil latihan.
1. 50% Theory
2. 50% Practices
3. Dynamic and interactive training presentation.
WHO SHOULD ATTEND
• IT Managers
• Security Managers
• Auditing Staffs
• IT Operation Staffs
LEAD FACILITATOR
Iwan Sumantri, CEH, CEI, CHFI, CISA, CISM, CISSP, MCSE, CCNA.
Trainer yang bersertifikasi Internasional ini mempunyai pengalaman menjadi instructor / trainer pada berbagai pelatihan nasional, baik perusahaan-perusahaan swasta, BUMN atau instansi pemerintah di berbagai kota besar di Indonesia. Diantaranya DKI Jakarta, Riau, Kalimantan, Sulawesi, Maluku Utara hingga Papua Barat.
Pelatihan-pelatihan yang pernah Beliau bidangi diantaranya : IT Security Assessment, Risk Assessment & Gap Analysis, Penetration Testing Jaringan dan Aplikasi, Hacking Forensics Investigator, Keamanan Infrastruktur Internet Indonesia, Hacking Technique & Defense Strategy, Sosialisasi LPSE dan SMEP, Solusi Aplikasi E-Government dan lain-lain.
Tentu saja, beliau pun berpengalaman mengajar pelatihan bersertifikasi internasional. Diantaranya pelatihan Certified Ethical Hacker (CEH) v6, ECCouncil Network Security Administrator (ENSA), Certified Hacking Forensic Investigator (CHFI), Certified Information System Auditor (CISA), Certified Network Security Administrator (CNSA), Certified Information System Security Professional (CISSP), Cisco Certified Network Associate (CCNA), Certified Information Security manager (CISM), di beberapa perusahan dan instansi pemerintah seperti Telkom dan Lembaga Sandi Negara.
Date
- 18 – 20 Januari 2012
Venue
- Aryaduta Hotel Semanggi / Harris Hotel Jakarta
Investment :
- Rp 5.150.000,- ( Full Fare )
- Early Bird : Rp 4.900.000,- (Paid 4 days Before H)
- Group Price : Rp 14.400.000,- (3 participants from the same company)
cforms contact form by delicious:days
Popularity: 2% [?]
Related training:
- INFORMATION TECHNOLOGY INFRASTRUCTURES LIBRARY (IT-IL) INFORMATION TECHNOLOGY INFRASTRUCTURES LIBRARY (IT-IL) Hotel Ibis Slipi – Jakarta |Kamis-Jumat, 12-13 Mei 2011| 09 – 17.00 WIB | Rp.3.000.000,- Tinjauan Pelatihan: Information Technology Infrastructure Library suatu rangkaian konsep...
- Managing Investment of Information Technology (IT) Managing Investment of Information Tchnology (IT) Aryaduta Hotel Semanggi / Santika Hotel Jakarta| 27-28 June 2011 | 08.30 - 16.30 | Rp 2.950.000,- BACKGROUND Sering dijumpai pimpinan perusahaan disejumlah organisasi,...
- INFORMATION SYSTEM SECURITY INFORMATION SYSTEM SECURITY KARTIKA CHANDRA HOTEL – Jakarta | 19 s/d 20 Mei 2010 | Rp. 3. 950.000,- Course Contents and Descriptions IS Audit Process : Provide IS audit services...
- Information Technology for Non-IT Managers Information Technology for Non-IT Managers Grand Serela Hotel, Bandung | June 1-2, 2009 | Rp.3.400.000,- The server is down, your data is lost, and the only guy who can...
- Information technology (IT) For Non IT Officer Information technology (IT) For Non it Officer Grand Seriti Hotel Bandung / Banana Inn Hotel and Spa Bandung | 28-29 July 2011 |08.30 – 16.30| Rp 3.150.000,-/Person BACKGROUND IT for...
- INTERNAL AUDIT ISO 17025 : 2005 INTERNAL AUDIT ISO 17025 : 2005 Hotel Grand Preanger, Bandung | 19 – 20 Januari 2012 | 08.30-16.30 WIB | Rp 2.800.000,- Hotel Grand Preanger, Bandung | 16 – 17...
- AUDIT INTERNAL ISO 9001:2008 AUDIT INTERNAL ISO 9001:2008 Hotel Grand Preanger, Bandung | 24 – 25 Januari 2012 | 08.30-16.30 WIB | Rp 2.800.000,- Hotel Grand Preanger, Bandung | 21 – 22 Februari 2012...
- INTERNAL AUDIT BERBASIS COSO : Paradigma baru dalam Internal Audit dan Internal Control INTERNAL AUDIT BERBASIS COSO: Paradigma baru dalam Internal Audit dan Internal Control Harris Hotel Tebet / Aryaduta Hotel Semanggi, Jakarta | Kamis, 11-08-2011 – Jum’at, 12-08-2011| Rp 3.150.000,- Harris Hotel Tebet...
- RISK BASED AUDIT : Internal Audit Berbasis Risiko RISK BASED AUDIT : Internal Audit Berbasis Risiko Harris Hotel Tebet / The Aryaduta Hotel Semanggi, Jakarta | Kamis, 27-10-2011 – Jumat, 28-10-2011 | Rp 3.150.000,- Harris Hotel Tebet / The Aryaduta Hotel...
- Analisa Dan Laporan Temuan Audit : Audit Investigatif, Analisa Temuan Audit, Pembuatan Laporan Audit Analisa Dan Laporan Temuan Audit : Audit Investigatif, Analisa Temuan Audit, Pembuatan Laporan Audit Hotel Redtop Jakarta | 23 s.d 24 Juni 2011 | Rp 3.500.000,- Audit investigatif adalah...
