IT Audit and Control

IT AUDIT AND CONTROL

TABLE OF CONTENTS
INTRODUCTION...........................................................................................................................3
MAIN BODY...................................................................................................................................3
Analysis of audit report and review of findings and irregularities found in report................3
Audit strategies and actions....................................................................................................7
CONCLUSION................................................................................................................................7
REFERENCES................................................................................................................................1

INTRODUCTION
IT audit can be defined as an examination and evaluation of organization’s information
technology application, infrastructure, management, data use, policies, operational processes,
procedure against recognized and established standards and policies (Rusmin and Evans, 2017).
IT audit is one of the most important factors which is required for organizations to conduct as it
helps companies to evaluating controls to protect information technology assists in order to
ensure integrity and their effectiveness so that it can be verified that such assets are aligned with
overall organizational goals and objectives. It helps in assuring that all the computer systems are
well assigned and safeguard assets and are integrated in a well- defined manner. It further helps
in effectively and accurately and if there is any kind of issue or problem with the IT system then
those issues can be identified in a timely manner so that solution for the same can be identified
properly. This assignment is based upon assessment of sample IT audit report of Western
Australia Auditor General Report. This assignment will also lay emphasis on audit focus and
scope of audit report, audit findings in RAMS system, audit findings in Horizon power, audit
findings in PRS and PRX, audit findings in NRL-T, professional, legal and ethical
responsibilities of an IT auditor, strategy used to produce the report, recommendations included
within the report as future source of action.
MAIN BODY
Analysis of audit report and review of findings and irregularities found in report
There are various kinds of issues or irregularities that were found within the report that
can impact overall government entities and their work (Hassan, 2016). It can impact overall
integrity of the system as well as can reduce overall security of the data stored within the
application systems as well.
Audit focus and scope-:
This audit report majorly focuses on business applications that are used at numerous state
government entities. Each of these applications plays a vital role in completing various
operations of government entities in a much better and appropriate manner. It helps in analysing
whether the applications and processes related to it are managed in an appropriate manner or not.
Four main types of applications that has been covered in this audit report are: Recruitment
Advertisement Management System which is a public sector commission application, Pensioner
Rebate Exchange and Scheme, Advanced Metering Infrastructure which is a Horizon Power