Scope and Findings of IT Audit Report

Assesment 3

TABLE OF CONTENTS
INTRODUCTION...........................................................................................................................2
MAIN BODY..................................................................................................................................2
Scope and focus...........................................................................................................................2
Audit findings in various systems................................................................................................2
Ethical and legal responsibilities of an IT auditor.......................................................................6
CONCLUSION................................................................................................................................7
REFERENCES................................................................................................................................8

INTRODUCTION
Information technology (IT) audit is defined as the set of monitoring and controlling
activities in which integrity, confidentiality and performance standards of existing IT systems of
an organisation are reviewed by experts (Drljača and Latinović, 2016). The purpose of this type
of audits is to ensure that IT systems of business are secure and effective in terms of performance
management which otherwise could lead to the security risks or failure with IT infrastructure of
the organisation (Lu and et.al., 2018). The report will analyse the findings and scope of an IT
audit report. It will also provide suitable recommendations to improve the findings and make IT
infrastructure more secure and efficient for information handling.
MAIN BODY
Scope and focus
The audit report focuses on four key applications namely RAMS, Horizon power, NRL-T
and PRS & PRX. Each of these applications is reviewed in terms of information security, data
processing time and intended outcomes versus actual outcomes received, recovery and data
backup, segregation of duties, authenticity and other credible requirement of input, output as well
and processing data. Each of the entities related to information systems and related applications
were assessed and classified on the basis of different rating scales (Stafford and et.al., 2018). The
purpose of audit was to analyse and evaluate the effectiveness of samples of IT processes so that
reliability, security and accessibility of their operations can be assured. The focus of this type of
auditing is not only limited to only highlighting the drawbacks and inefficiency loop holes in the
IT infrastructure but also to recommend appropriate solutions for improving the information
processing systems or entities related to various applications.
Audit findings in various systems
RAMS
Recruitment advertisement management system (RAMS) is used by entities of Western
Australian (WA) government for managing redeployments, recruitment and severance details
related work. From the audit it has been found that some of the components of software are not