Certified GRC Auditor (CGA) Training Course

IT Audit Fundamentals and Practices

• Introduction to IT Auditing
  • Overview of IT Audit
  • Types of IT Audits: ITGC Audit, SOX Audit, IS Audit
• Audit Planning and Preparation
  • How to Develop an Effective Audit Plan
  • Identifying and Assessing Audit Risks
  •  Key Considerations for Risk Management
  •  Audit Risk Assessment Approach
• Types of Controls in IT Auditing
  • Different Control Types and Their Application
• Risk and Governance Auditing
  • Auditing Risk Registers
  • Auditing Governance Structures
  • Reviewing Information Security Policies
• Essential Audit Tools and Templates
  • Importance of IDR, RCM, and Observation Sheets
• Access Management Auditing
  • Auditing User Access Management (UAM) and Logical Access Controls
  • Auditing Password Controls
  • Auditing HR Security Controls
• Change and Configuration Management Auditing
  • Auditing Change Management Processes
  • Auditing Patch Management Procedures
• Log and Incident Management Auditing
  • Auditing Log Management and Audit Trails
  • Auditing Incident Management Systems
• Business Continuity and Data Management Auditing
  • Auditing Business Continuity Management (BCM), BIA, BCP, and DR
  • Auditing Backup and Restoration Procedures
• Specialized Audits
  • Auditing Data Classification Procedures
  • Auditing Capacity Monitoring Processes
  • Auditing Vendor Management and Outsourcing Practices
  • Auditing Physical and Environmental Controls
  • Auditing Data Centers
• ISO Standards Overview
  • Brief Overview of ISO 27001, ISO 22301, and ISO 27701
• Auditing Specific IT Controls
  • How to Audit the Following IT Security Controls:
    • Data Loss Prevention (DLP) and Mobile Device Management (MDM)
    • Antivirus Solutions
    • Firewalls, IDS/IPS Systems
    • Virtual Private Networks (VPN)
    • USB and Peripheral Port Control
    • Privileged Identity Management (PIM) / Privileged Access Management (PAM) Tools
• Drafting Audit Observations and Reporting
  • How to Effectively Draft Audit Observations
  • Preparing a Comprehensive Audit Report
• Interview Preparation for IT Auditors
  • Key Areas to Focus on for IT Audit Interviews
  • Mock Interview Tips and Techniques

• Anyone who is interested in Information Technology (IT) / Information System (IS) Audit
• Auditors interested to learn about IT / IS Audits
• Beginners/freshers in Information System Audit
• Qualified IT Professionals (like CISA, CISM, ISO27001, etc.) who want to learn practical aspects of IT / IS Audits
• Chartered Accountant and Article Assistant who wants to make their career in IT Audits

• The course is designed for freshers who are interested in IT Audit. Basic knowledge of MS Office (Excel, Word, PowerPoint) is required to analyse the data and prepare the draft report.

• Learn the purpose, scope, and importance of IT audits.
• Create structured plans and assess risks efficiently.
• Identify and apply various control types for governance and security.
• Review risk registers, governance frameworks, and policies.
• Master tools like IDR, RCM, and observation sheets.
• Specialize in access, change, log, and data management audits.
• Understand ISO 27001, 22301, and 27701 for audit alignment.
• Communicate audit findings clearly with actionable insights.