The course content addresses the following topics:
- IT audit fundamentals
- Various Computing Environments and the Typical Organisational Structure Supporting Technology
- The effect of King IV and the Committee of Sponsoring Organisations (COSO) Framework on IT environments
- Control Objectives for Information Technology (COBIT19)
- COBIT 19: general computer control domains
- Risks associated with system application
- IT controls
- IT risk assessment
- Developing and reviewing IT policies, procedures, and processes
- IT governance frameworks and strategies
- IT areas covered by General Control Reviews (GCR)
- User account management
- IT change management
- IT service continuity (backups and disaster recovery)
- Physical and environmental controls
- Creating audit files
- Audit planning memorandums
- Requests for information
- Populating audit working procedures
- Preparing a final IT audit report
- Program and project management frameworks
- Project governance
- Pre- and post-implementation reviews
- Project risk issues
- Preparing an IT audit project assurance report
- IT Infrastructure Library (ITIL)
- King IV report on corporate governance for South Africa
- Sarbanes-Oxley Act
- Laws relating to ICT as subscribed to in South Africa"