IT Auditing in Banks: IT Governance, IT Risk, IT Controls & Information Security

The participants will be introduced and gain a better appreciation of the regulatory requirements, standards, frameworks, actual versus "best" or "ideal" practices, "principles" versus "methods", practical challenges, insights, references, various tips and techniques, and trends in the conduct of the Information Technology (IT) Audit in the Banking Industry.

COURSE OBJECTIVES:

• To give the participants an overview of Information Technology (IT) Audit and its significant concepts

• To describe the role of IT Auditors to the Bank

• To introduce the various standards and frameworks relevant to IT Audit

• To discuss various types of IT risks

• To define and explain General Controls, and Applications Controls & Review

• To draw from and share to the attendees useful insights and practical lessons with respect to IS audit

COURSE OUTLINE:

• IT Assurance

o IT Assurance Services

• Information Technology Auditing

o The VUCA World

o Leadership Response to VUCA

• Risk Assessment

o Determining Risk Appetite

• IT Risks

o Integrity

o Security

o Security Concepts

• IT Layered Security

• The 3 Lines of Defense Model

• Control Classification

o IT Controls

o Application Controls

o General IT Controls

• IT Controls Implementation

• IT Risk Management System

• IT Governance

• IT Policies Procedures and Standards

• IT Controls Implementation

• IT Related Frameworks

• Introducing COBIT 2019

o Governance Framework Principles

o Overview

o Components of a Governance System

o 2019 Design Factors

o Governance System Design Workflow

o Implementation Roadmap

o Maturity Levels for Focus Areas

o Coverage and Other Standards/Frameworks

• IIA's GTAG

• Tools for Improving IT Governance

• IT Audit

• Information Technology Auditing

• Risk-Based Audit Approach

• IT Audit Tasks

o Understanding the Mission, Requirements, and Challenges of the IT Audit Functions

o Strategic IT Audit Planning

o Resource Management

o Engagement Management

o Follow-up Activities

o Consulting and Other IT Audit Services

o Emerging Trends, Agile Auditing, Audit Management Automation and Continuous Learning

SCHEDULE:

April 1, 2023 (Saturday)

9:00 AM – 5:00 PM

RESOURCE SPEAKER:

Mr. Reginald C. Nery

SVP & Chief Audit Executive

Bank of Commerce

TRAINING FEE PER PARTICIPANT:

From Member Institution – P 2,800.00

From Non-Member Institution – P 3,920.00

**VAT inclusive