The Basics of IT Audit

Chapter 3

Internal Auditing

There are significant differences in motivations, practices, and anticipated outcomes of internal auditing programs and activities compared to external audits; this chapter focuses on internal auditing to describe its primary motivations, the benefits and other results organizations expect from it, and challenges and drawbacks to effective internal auditing. The scope of this chapter includes establishing and operating an internal audit function to oversee audit activities and the types of internal IT audits most commonly conducted in organizations. It also considers the individuals who perform internal audits, whether actually employees of the organization undergoing audit or those hired to conduct internal audits. ...