IT Governance for the Non-IT Professional

Course Outline

Benefits

In the UK, risk auditing has become a key aspect of the statutory audit driven by the Turnbull Report in the UK and the COSO framework and Sarbanes Oxley legislation in the US. Auditors need to understand the inherent risks in any business before they can assess what kind of controls are required and their effectiveness.

This course is designed to help the auditor to identify ICT risks and to assess the control regime. The course uses a case study and checklists to help the auditor to draw up appropriate audit tests designed to test the effectiveness of controls.

Content

The course includes:

	IT Management & Governance - managing stakeholder expectations, recognising critical dependencies on IT, the relationship between IT management and the Executive Board, governance structures
	The legal environment
	Performance and Service - service level agreements, contracts, outsourcing
	Business Continuity Planning and Disaster Recovery
	IT projects - project life cycle, software development, standards and testing
	Jargon Busting
	Controlling risks

Skills you will gain

	An understanding of how to set up an IT governance environment
	An understanding of the legal implications of using IT in a business context
	An understanding of how to protect the business from failings in its IT facilities

Who Should Attend?

Any business manager not involved in the day-to-day management of the IT function; Accountants and finance managers with responsibility for managing the IT function; internal or external auditors.

Level of Knowledge Assumed

Some experience of IT would be helpful but not essential.

Duration of Course

I day

For more information, please contact Sandy Pratt

Back to Training Courses