International Centre for

Information Systems and Audit,

(iCISA)

Office of the Comptroller and Auditor General of India,

A-52, Sector 62, Noida – 201301 (UP), India

83^rd

International Training Programme

on

“Auditing in Information Technology Environment”

(31^st March to 29^th April 2008)

First Week (Theme – IT Governance Mechanism and the IT Audit function)

Theme	Date & Days	Session 1 1000 – 1115 Hrs.	Session 2 1145 – 1300 Hrs.	Session 3 1400 – 1515 Hrs.	Session 4 1545 – 1700 Hrs.
IT Governance mechanism and the IT Audit function	31^st Mar. 2008 Monday	Registration		Negotiating the learning path		IT Audit professional Certifications and the need for Continuing Education
				iCISA / IT Audit Wing		R K Goel
	1^st Apr. 2008 Tuesday	Inauguration		IT Governance and its mechanisms		IT Environment and its effects on internal controls and auditing
				R K Goel		N K Sah
	2^nd Apr. 2002 Wednesday	IT Audit: Concepts and Practices		Gains from Business Process Re-engineering	IT Outsourcing and the Associated Risks
		Anupam Kulshreshtha		Sunil Bahri	K R Sriram
	3^rd Apr. 2008 Thursday	International IT Audit and IT Security standards	Assessing risks and returns while assessing IT investment decision making	COBIT: Introduction to the Conceptual Framework	COBIT: Management and auditing guidelines
		Vani Sriram	Vani Sriram	N K Sah	N K Sah
	4^th Apr. 2008 Friday	Business Continuity and Disaster Recovery Planning		Country Papers: Deciding about content, methods of preparation and evaluation criterion
		K R Sriram		Vinita Mishra, Santosh Kumar
	5^th Apr. 2008 Saturday	Delhi Sightseeing
	6^th Apr. 2008 Sunday

Second Week (IT Audit Process and IT Controls Evaluation)

Theme	Date & Days	Session 1 1000 – 1115 Hrs.	Session 2 1145 – 1300 Hrs.	Session 3 1400 – 1515 Hrs.	Session 4 1545 – 1700 Hrs.
IT Audit process and IT Controls Evaluation	7^th Apr. 2008 Monday	Planning IT Audits: Gaining an understanding of IT organization and status of IT controls in the entity	Auditing General IT controls with emphasis on access controls and Change Management Controls	Panel Discussion: Should an IT Auditor be an IT Specialist?
		K P Sasidharan	K P Sasidharan	N R Rayalu, Anupam Kulshreshtha, Sanjeev Arora
	8^th Apr. 2008 Tuesday	IT Application controls	Evaluation of IT Application controls	Group photo session with the C&AG of India at the O/o the C&AG of India, New Delhi.
		K Srinivasan	K Srinivasan
	9^th Apr. 2008 Wednesday	Audit of IT systems under Development: Risks and Opportunities	Auditing Local Area Networks	Auditing e Governance projects	IT Balance Scorecard
		Nilotpal Goswami	Puneet Mehta	Ashutosh Sharma	Anupam Kulshreshtha
	10^th Apr. 2008 Thursday	IT Security and risk assessment	Case Study: Assessing IT Security in Indian Railways	Access as a CAAT: Hands on session
		N Nagarajan	N Nagarajan
	11^th Apr. 2008 Friday	Code Review, Test Data and code comparison	IT Audit in insurance sector: A Case Study	Access as a CAAT: Hands on session
		Neeraj Kumar	Saroj Punhani
	12^th Apr. 2008 Saturday	Study Tour to Shimla and Chandigarh
	13^th Apr 2008 Sunday

Third Week (Theme –IT security and related audit issues)

Theme	Date & Days	Session 1 1000 – 1115 Hrs.		Session 2 1145 – 1300 Hrs.	Session 3 1400 – 1515 Hrs.		Session 4 1545 – 1700 Hrs
Study Tour/ Managing IT	14^th Apr. 2008 Monday	Study Tour to Shimla and Chandigarh
	15^th Apr. 2008 Tuesday
	16^th Apr. 2008 Wednesday
	17^th Apr. 2008 Thursday	Auditing IT Procurements	Auditing IT Project Management			Panel Discussion: Managing IT in an organisation
		Deepak Anurag	Faculty from R-Systems			Ajay Sawhney, K Subramanian
	18^th Apr. 2008 Friday	Mahavir Jayanti - FREE
	19^thApr. 2008 Saturday	Visit to Agra
	20^th Apr. 2008 Sunday

Fourth Week (Computer Assisted Auditing Techniques)

Theme	Date & Days	Session 1 1000 – 1115 Hrs.	Session 2 1145 – 1300 Hrs.	Session 3 1400 – 1515 Hrs.		Session 4 1545 – 1700 Hrs.
Computer Assisted Auditing Techniques	21^st Apr. 2008 Monday	Assessing reliability of computer processed data using CAATs	Fraud detection using data analysis techniques	IDEA: Data Importing
		Sandip Roy	Sandip Roy	Neeraj Kumar
	22^nd Apr. 2008 Tuesday	Auditing ERP Systems	Case Study: Audit of an ERP system in International Maritime Organization	IDEA: Case Studies and Hands on practical exposure
		Sadu Israel	Sadu Israel	Neeraj Kumar
	23^rd Apr. 2008 Wednesday	Country Papers		IDEA: Case Studies and Hands on practical exposure
		Vinita Mishra, Santosh Kumar		Neeraj Kumar
	24^th Apr. 2008 Thursday	Auditing Oracle RDBMS security	Concurrent Auditing Techniques	IDEA: Case Studies and Hands on practical exposure
		R K Goel	Anupam Kulshreshtha	Neeraj Kumar
	25^th Apr. 2008 Friday	Auditing web based transaction processing applications	Reporting on IT Audits: Writing findings for non IT audiences	Data Mining using Wizrule	Country Papers
		Ashutosh Sharma	Reena Saha	R K Goel	Vinita Mishra, Santosh Kumar
	26^th Apr. 2008 Saturday	VISIT TO JAIPUR
	27^th Apr. 2008 Sunday	VISIT TO JAIPUR

Fifth Week (Theme – Emerging areas)

Theme	Date & Days	Session 1 1000 – 1115 Hrs.	Session 2 1145 – 1300 Hrs.	Session 3 1400 – 1515 Hrs.	Session 4 1545 – 1700 Hrs.
Winding Up	28^th Apr. 2008 Monday	IT Audit Quiz	IT Audit: Future Challenges	Feedback
		R K Goel	Sunil S Dadhe
	29^th Apr. 2008 Tuesday	Valediction

LEGENDS

Lectures/ Presentations

Case studies / panel discussions / Quiz

Practical exposure

Field study visits

Leisure / free time

Miscellaneous

Country Paper presentations