IT Audit and Controls

IT Audit and Controls

Table of Contents
Introduction......................................................................................................................................3
Determine audit focus along with scope of audit report.........................................................3
Illustrate high risk issues within NSW City council..............................................................3
Portray audit findings associated with IT governance in NSW City......................................4
Depict audit findings in context of IT general controls..........................................................5
Portray audit findings linked with cyber security management within NSW City................7
Conclusion.......................................................................................................................................8
References........................................................................................................................................9

Introduction
The systematic evaluation of security aspects of firms information system through
measuring of how well they conforms to set of formulated criteria is referred to as IT security
audit (Agyei-Mensah, Agyemang and Ansong, 2020). This presents higher level of description
with respect to ways in which firm can test as well as access their security postures that
comprises of cyber security. To have an understanding related with this aspect NSW City
Council is being taken into regards which are liable for allocating financial reporting process.
This report will provide an insight into scope of audit report, high risk issues and findings
associated with IT governance. Furthermore, it also involves IT general controls along with
aspects associated with cyber security.
Determine audit focus along with scope of audit report
The Councils are responsible for allocation of resources along with time for financial
reporting process and for this they have adequate processes, resources and systems which are
liable for executing new standards for accounting. The scope of this report is to furnish an audit
for strengthening quality, timelines of financial reporting along with recommendations in context
of internal governance and controls (Chopra and Chaudhary, 2020). Here, emphasis is laid on
high risk issues so that firm can have adequate services without having any compromise within
their services. Along with this, IT policies has to be formalised as well as reviewed regularly to
make sure emerging risks have been taken into consideration and adequate policies are reflective
in context of alterations within IT environment. It is necessary to identify risks and manage them
adequately so that third person or intruders do not have access to particular information.
Moreover, focus will be on improvisation of user access management processes for ensuring that
information systems are secured as well as possess significant controls through which
modifications can be made easily within information system as per requirements. In addition to
this, asset registers needs to be updated, reconcile them with asset management system that
comprises have significant controls for ensuring integrity in context of manual spreadsheet.
Illustrate high risk issues within NSW City council
Councils are dependent on IT (information technology) for delivering their services as
well as manage their data and information. While IT is responsible for delivering considerable
benefits, it also possesses present risks which Council have to acknowledge (Chopra and