Core Courses

• None

Elective Courses

• None

Mandatory

Suggested

Overview of Information Systems (IS) Auditing

• The Framework for IS Auditing: Federal Standards and Requirements
• Information Systems Audit and Control Association's (ISACA's) Control Objectives
• IS Auditing
• IS Auditing: Definitions and Fundamentals

IS Risk Assessments and Internal Controls

• The Information Systems (IS) Risk Assessment Process
• Data Integrity, Systems, Disaster Recovery, and Breaches
• GAO's High Risks Related to IS
• Exercise: Select Risks in the Threaded Case Study
• Internal Controls in the IS Environment
• IS Auditor Responsibilities
• Exercise: Select Internal Controls in the Threaded Case Study

The Information Systems Auditing Process

• Introduction to the Auditing Process
• Planning the Audit
• Conducting the IS Audit
• Testing Design and Operating Effectiveness of General and Application Controls
• The IS Audit Report

The Reality of Information Systems Auditing

• Putting the Pieces Together: Walking Through Sample IS Reports
• Audit of the Information Systems General and Application Controls at the National Association of Letter Carriers Health Benefits Plan
• GAO's Cybersecurity Approach and Audit Example
• Library of Congress Cloud Service Provider Governance Performance Audit
• Exercise: Capstone Final Review of IS Case Study
• Application in Organizational Settings