Auditing Information Systems, Second Edition

10.4. ADDITIONAL KEYS TO A SUCCESSFUL PROGRAM

The third key to a successful CSA program is proper training of auditors in the skills necessary to facilitate CSA. Historically, auditors have interacted with client staff and management on a one-on-one basis or in small group meetings. Auditors were not typically required to facilitate discussion by other groups. However, as CSA becomes more and more the norm in leading-edge companies, the demand for IS auditors as well as non-IS auditors who possess CSA facilitation skills will be significantly enhanced.

As a result, many firms are finding it necessary to send some of their staff to attend facilitation training in order to hone their facilitation skills. Because facilitation skills are often used by many course instructors, the training department within an organization should be able to assist in finding facilitation courses. Other possible sources would be conferences and seminars sponsored by local chapters and international headquarters of internal auditing professional associations such as the IIA and the ISACA. The IIA also sponsors the Certificate in Control Self Assessment (CCSA) designation.

Auditors must also be highly knowledgeable about the particular internal control framework(s) adopted by an organization's audit department. Therefore, training of both IS and non-IS auditors on the details of the applicable internal control framework(s) is also critical. Again, conferences and seminars can be an important source of ...