QA Pro AcademyCybersecurity A-Z
Join free
← Back to catalogue
Reviewing Aldermoor Building Society's IS audit reports the way a motivated auditee, a sceptical committee member and a regulator will read them: the eight-segment reporting cycle — evidence, working papers, finding, rating, draft, management response, final report and follow-up — each with its measured result; the headline finding that collapsed at committee, 23 of 41 leavers keeping privileged access, withdrawn because its extract pre-dated the review period; and the results, with rating agreement up from 47 to 87 per cent, days to final report down from 67 to 34 and validated on-time closure up from 58 to 81 per cent.
CY-EXPERT-100Expert Level · Information Systems Audit

Adversary-Aware Review of IS Audit Reporting

An expert-level course on reviewing IS audit reports the way a motivated auditee, a sceptical audit committee member and a regulator will read them - looking for findings that can be disputed, ratings that cannot be defended and conclusions the evidence does not support. Work round the IS Audit Reporting Cycle, eight segments that every report passes through: evidence tested for sufficiency and period; every statement tied to a reviewed working paper; findings built from condition, criteria, cause, effect and recommendation; ratings from a published methodology; drafts written for the committee and for management and read by their hardest readers; management responses that are owned, dated and honest about disagreement; quality review before issue; and follow-up that validates closure and measures report quality over time.

18 hours8 chapters32 lessons225 activities8 labs

What you'll learn

  • Withdraw and reissue a collapsed finding, test evidence for sufficiency, reliability, relevance and period, verify system extracts, and re-read a portfolio as a motivated auditee would.
  • Reference and independently tie every statement to working papers a stranger can re-perform, control carried-forward evidence, and measure the evidence trail.
  • Build findings from condition, criteria, cause, effect and recommendation, with agreed criteria, root causes management can change and quantified effects.
  • Rate findings against published impact and likelihood criteria, calibrate the team by blind re-rating, derive opinions by rule and defend ratings with a rationale record.
Price:৳12,000
Sign in to get access

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.