Objectives         An examination of the management controls within an information technology infrastructure of the client. The evaluation of obtained evidence determines if the information systems are safeguarding assets, maintaining data integrity, and operating effectively to achieve the client firm’s organizations goals and objectives. These reviews may be performed either independently or in conjunction with a financial statement audit, internal audit or other form of attestation engagement.               Methodology

• 1. 1. Audit planning.
     2. Risk assessment and business process analysis.
     3. Audit strategy (Risk based information systems audit approach).
     4. Performance of audit work.
     5. Control Objectives for information and related technology (COBIT).
     6. Application control review.
     7. Use of Computer Aided Audit Techniques (CAATs) in the performance of an IS audit.
     8. Audit closure meeting.
     9. Reporting.
   

          Deliverables

1. 1. Information systems audit report