• The organization consistently applies the
controls they have designed and that there are
no operational deficiencies.
IT audit process normally involves the following
steps:
• Planning
• Evaluation of controls
• Evidence collection and evaluation
• Reporting and follow up
Proper planning assists the auditor in:
• The direction and control of his work;
• Highlighting critical areas;
• Allocation of audit resources towards more
important areas;
• Setting time frame and targets for review
work;
• Obtaining sufficient, reliable and relevant
audit evidence and
• Subsequently aid the auditing in decision
making