Please enable JavaScript.
Coggle requires JavaScript to display documents.
Chapter 1 - Information System Auditing Process - Coggle Diagram
Chapter 1 - Information System Auditing Process
1.7 Sampling Methodology
Testing
Compliance Testing
Substantive Testing
Sampling
Approaches
Statistical Sampling
Non-statistical Sampling (Judgemental sampling)
Methods
Attribute Sampling
Attribute Sampling
Stop-or-go sampling
Discovery Sampling
Variable Sampling
Stratified mean per unit
Unstratified mean per unit
Difference estimation
1.1 IS Audit Standards, Guidelines and Codes of Ethics
ITAF
Standards
General Standards
Performance Standards
Reporting Standards
Guidelines
General Guidelines
Performance Guidelines
Reporting Guidelines
Tools and Techniques
1.2 Business Processes
Audit Charter
Approved by highest level of management and audit committee
1.3 Types of Controls
Types
Preventive
Detective
Corrective
Compensating Controls
Always review compensating controls before reporting weakness
General Controls
IS-Specific Controls
1.4 Risk-based Audit Planning
Audit Risk
Inherent risk
Control risk
Detection risk
Overall audit risk
Risk-based Audit Approach
Gather Information and Plan
Obtain Understanding of Internal Control
Perform Compliance Test
Perform Substantive Test
Conclude the Audit
Risk Assessment
Asset
Threat
Vulnerability
Impact
Likelihood
Risk Response
Mitigation
Acceptance
Avoidance
Sharing (Transfer)
Risk Reevaluation
1.10 Reporting and Communication Techniques
Audit Report Objectives
Formally present audit result
Formal closure
Provide statements of assurance
Serve as valued reference
Serve as basis for follow-up audit
Promote audit credibility
Audit Report Structure
Introduction
Findings
Overall conclusion and opinion
Reservations or qualification
State the controls or procedures examined were found to be adequate or inadequate
Detailed findings and recommendations
A variety of findings
Types of Audit Reports
Review
Examination
Agreed-upon procedure engagements
1.11 Quality Assurance and Improvement of the Audit Process
Control Self-Assessment (CSA)
Facilitated workshop for small business
Integrated Auditing
Operational Audit
Financial Audit
IS Audit