InFission IT Audit approach
The IT Audit Director (IAD) is responsible for the IT Audit plan at InFission. The IAD develops the IT Audit plan based on the overall audit objectives established by the Chief Audit Executive (CAE) and approved by the Audit Committee.
The goal of the IT Audit program at InFission is to provide reasonable assurance to management that the business objectives will be achieved with effective controls over information technology systems. IT controls are selected based on risk assessment, compliance requirements, and IT governance standards to enforce the policies and procedures to ensure effectiveness and efficiency of operations, reliability of financial reporting, and regulatory compliance.
IT Audit scope management
The scope of the InFission IT Audit plan includes assessment of controls that are classified into the following two categories:
IT General Controls
Application controls
The IT General controls provide overall assurance over the IT control environment, such...
