Module VIII – Information Security Audit

Course objective

This course allows participants to understand and master the information security audit process. It presents, at the conceptual level, audit and control of information systems. Topics covered include audit objectives, IT audit process, audit and control tools and techniques, standards and methods used in the context of the information security audit.

At the end of the course, the participant will be able to:

• understand the challenges of information security auditing
• conduct a full IT security audit engagement
• master the information security audit process
• produce an information security audit report
• follow up on the recommendations of an information security audit mandate

Teaching formula

• Lectures
• Teamwork
• Case studies

Target audience

• Information security analysts
• Internal audit managers
• Auditors
• IT executives
• Owners and users of Information Systems
• People interested in IT auditing

Course content

• Information security and audit
• The objectives of information security
• Information security risk management
• The objectives of the information security audit
• Information security audit process
• Standards and methods used in the context of the information security audit
• Information security audit tools and techniques
• Competencies of the information security auditor
• The CISA exam