ICT Audit and ICT Fraud Detection

Course overview

Most financial transactions now run through ERP systems, payment platforms and mobile channels, so the most important controls are often inside the systems themselves. Auditors who cannot assess them leave major risks unexamined. This IT audit course gives auditors the knowledge to review ICT controls and to detect fraud committed through information systems.

Participants learn the fundamentals of ICT governance, general IT controls and application controls, and how to plan a risk-based ICT audit. They practise reviewing access management, segregation of duties, change management, backup and continuity, and interface controls in financial systems. The fraud part covers common ICT-enabled schemes such as unauthorised master data changes, manipulated payment files, privileged user abuse and insider collusion, together with audit analytics to detect them from system logs and transaction data. No programming background is needed; the focus is on what auditors should ask, test and evidence.

Participants leave able to audit key ICT controls and to detect signs of fraud in system data.

What you will be able to do

• Explain ICT governance and its link to financial control
• Plan a risk-based ICT audit
• Assess access, segregation of duties and change management controls
• Review application and interface controls in financial systems
• Recognise common ICT-enabled fraud schemes
• Use system logs and analytics to detect suspicious activity
• Report ICT audit findings in plain language

Who should attend

For internal and external auditors, risk officers and finance managers who need to assess ICT controls and systems-based fraud risk.

• Internal auditors
• External auditors
• IT auditors in training
• Risk and compliance officers
• Finance system administrators
• Fraud investigators
• ICT managers

Course outline

Fees are per participant in US dollars and cover tuition, course materials and your certificate. Travel and accommodation are not included.