Information System Audit How to Control the Digital Disruption

Preface

1—Audit

1.1—Legacy

1.2—Regulation, Controls and Audits

1.3—Audit and digital transformation

Bibliography

2—Information System

2.1—Information

2.2—Information Systems

2.3—IT impact on Information Systems

Bibliography

3—Information System Audit

3.1—Challenges

3.2—Different types of audits

3.3—Digitalization

Bibliography

4—Legal Risks

4.1—Sui generis risks

4.2—Identification and prevention

4.3—International context and innovation

Bibliography

5—Operational risks

5.1—Processes

5.2—Data

5.3—Digital impact

Bibliography

6—IT processes

6.1—Administrative processes

6.2—Service management

6.3—Project management

7—Human uncertainties

7.1—Unintentional acts

7.2—Intentional acts

7.3—Security

7.4—Forensic

Bibliography

8—IT risks

8.1—Geographical coverage

8.2—Data mobility, media mobility

8.3—Data media mobility

8.4—Are IT induced risks new?

Bibliography

9—Confidence

9.1—Short-term confidence

9.2—Medium-term confidence

9.3—Long-term confidence

Bibliography

10—Risks management

10.1—Enterprise risks

10.2—Operational risks

10.3—Technical risks

11—Information System Audit Strategy

11.1—Back to basics on audit strategy

11.2—Digitalization and audit strategy

11.3—Information Systems Risks due to its complexity

12—Performing audits

12.1—Back to basics on audit planning

12.2—Information System Audit planning

12.3—Achieving reasonable assurance

Bibliography

Biography

Philippe Peret is an IT Engineer with a major in IT Audit (CNAM, France). He passed a master in business administration (Toulouse School Management, France).

With plus twenty years of experience in IT, management, and audit, he works initially in consulting in program management office, project management. He co-authored the new release of SDMS™, SDMS21™, a leading methodology on Information Systems Management and projects management.

He moves to audit, CISA certified in 2008, and performs financial, IT, legal and forensic engagements initially for audit firms then for Corporate Audit departments (e.g. KPMG, Avon Cosmetics, Tyco International).

Other book (French and English):

• "More Haste? Less Speed! —Effective IT Project Management"—ISBN　978-2-9557622-0-2
  

This book provides an excellent overview of the history of auditing and its relationship with digitalization. It emphasizes the increasing importance of digitalization in today's business environment and its impact on audit strategy and preparation. 

Digitalization is no longer just a trend but a necessity for businesses. It involves the growing reliance on information technology within a company's information system. Many companies have seen new competitors succeed through digital approaches, opening up new markets and redefining customer interactions. As a result, all business processes can now be digitized. In this new landscape, auditors play a crucial role. They must adapt to the digital shift, as the days of specializing in just one technique, such as financial or IT auditing, are over. This presents a significant opportunity for auditing to evolve and align with the vision of a company's information system. 

One of the key challenges in the digital era is ensuring data consistency. Data used by different departments is often assumed to be identical simply because they share the same name. However, this assumption is not always accurate for three main reasons: 

1. Data with the same name may describe different things. 

2. Data with the same name may refer to the same thing but describe it differently. 

3. Data with the same name may refer to the same thing and describe it similarly but manage it differently. These inconsistencies pose a significant challenge that auditors must address. 

The author also informs us about the importance of moving from the concept of IT to the idea of information systems, which involves linking IT risks to business risks and creating services around the company's operational functions. 

I highly recommend this book to all our colleagues. The author provides a systematic and comprehensive explanation of the events that have shaped the future of the auditing career. The book is based on important events and institutional experiences in the business world. It offers a holistic approach, revealing the evolution of auditing from the past to the present, and makes an essential contribution to the literature in this field. 

- Assoc Prof Sezer Bozkus Kahyaoglu CIA, CFE, CFSA, CRMA, CICP, CPA 

- Izmir Bakircay University