The GTAG series was created to provide high-level technology information from a business point of view that can help internal auditors worldwide better understand the different risks, controls, and governance issues surrounding technology. Along with the GAIT guides, GTAGs are officially recognized as "strongly recommended guidance" under the International Professional Practices Framework (IPPF).
Prepared by The Institute of Internal Auditors (The IIA), each Global Technology Audit Guide(GTAG) is written in straightforward business language to address a timely issue related to information technology (IT) management, control, and security. The GTAG series serves as a ready resource for chief audit executives on different technology-associated risks and recommended practices.
PG GTAG-12 : Auditing IT Projects
PG GTAG-11 : Developing the IT Audit Plan
PG GTAG-10 : Business Continuity Management
PG GTAG-9 : Identity and Access Management
PG GTAG-8 : Auditing Application Controls
PG GTAG-7 : Information Technology Outsourcing
PG GTAG-6 : Managing and Auditing IT Vulnerabilities
PG GTAG-5 : Managing and Auditing Privacy Risks
PG GTAG-4 : Management of IT Auditing
PG GTAG-3 : Continuous Auditing: Implications for Assurance, Monitoring, and Risk Assessment
PG GTAG-2 : Change and Patch Management Controls: Critical for Organizational Success
PG GTAG-1 : Information Technology Controls
GTAG Overall Slides (PPT, 475KB)
GTAG presentation slides highlight what is GTAG, who is the GTAG target audience, who are involved the GTAG development, guides published, future topics, etc.
The following topics have been identified by The IIA Advanced Technology Committee as future GTAG Guides:
•
|
Fraud Prevention and Detection in an Automated World |
| • |
Auditing Security Governance |
| • |
User Developed Applications |
| • |
Technology Product Development Lifecycle |
| • |
IT Governance |
| • |
Computer Assisted Audit Techniques (CAATs) |
The GAIT series describes the relationships among risk to the financial statements, key controls within business processes, automated controls and other critical IT functionality, and key controls within IT general controls (ITGC). Each practice guide in the series addresses a specific aspect of IT risk and control assessments.
|
|
|
