Audit & Quality
Technology Audit Foundation
This five-day programme builds the core knowledge auditors need to examine IT environments with confidence, covering IT governance and control frameworks, IT general controls, applications, infrastructure and networks, technology risk and audit evidence, and reporting, findings and follow-up. Participants develop skills in IT control assessment, access and change control testing, evidence evaluation, and IT audit reporting.
Introduction
Technology Audit Foundation Training Course builds the core knowledge auditors need to examine IT environments with confidence. Participants work through IT governance and control frameworks, IT general controls and application controls, technology risk assessment, auditing infrastructure and networks, auditing the systems development and change process, and IT audit evidence, reporting, and follow-up as one connected foundation. The programme links the technology an organisation depends on with the controls that keep it secure and reliable. As a result, learners gain a practical method for technology auditing. Furthermore, the course strengthens technical literacy, control judgement, and evidence discipline.
Technology Audit Foundation Course Objectives
- Explain IT governance and the auditor's role in technology.
- Apply COBIT and ITIL frameworks to IT audit work.
- Apply IT general controls across access, change, and operations.
- Apply application controls and interface testing.
- Apply technology risk assessment and control mapping.
- Audit infrastructure, networks, and operating systems basics.
- Audit system development, change management, and release control.
- Apply IT audit evidence standards and sampling approaches.
- Apply data analytics and CAATs to IT audit work.
- Apply IT audit reporting, findings, and follow-up.
Course Methodology
- Interactive sessions built on IT audit cases across sectors.
- Workshops on IT general controls, risk assessment, and control matrices.
- Group exercises on access review, change control testing, and analytics.
- Hands-on practice with IT audit programmes, checklists, and evidence logs.
- Simulation of an IT general controls audit from planning to report.
- Facilitator coaching and peer review on personal IT audit plans.
Who Should Take This Course
- Internal auditors entering technology audit.
- IT auditors and IT risk professionals.
- IT managers and system administrators supporting audits.
- Compliance and governance officers covering IT.
- Information security staff and analysts.
- Consultants advising on IT controls and audit readiness.
Technology Audit Foundation Course Outlines
IT Governance and Control Frameworks
- • IT governance and its relationship to corporate governance.
- • COBIT framework and governance and management objectives.
- • ITIL service management concepts for auditors.
- • ISO 27001 and information security management overview.
- • The auditor's role in technology and IT audit standards.
- • IT policies, procedures, and accountability structures.
- • Case discussion: an IT environment with no control ownership.
IT General Controls
- • Access management, authentication, and privileged access.
- • User administration, reviews, and segregation of duties.
- • Change management and release control testing.
- • IT operations, job scheduling, and backup verification.
- • Incident management and problem resolution review.
- • Physical and environmental controls for data centres.
- • Workshop: designing IT general controls test steps.
Applications, Infrastructure, and Networks
- • Application controls: input, processing, output.
- • Interface and batch processing controls.
- • Database controls and data integrity basics.
- • Operating systems, servers, and virtualisation review.
- • Network architecture, firewalls, and segmentation basics.
- • Cloud services and third-party provider assurance.
- • Exercise: auditing an application and its interfaces.
Technology Risk and Audit Evidence
- • Technology risk assessment and risk registers.
- • Control mapping and control effectiveness evaluation.
- • IT audit programmes, scope, and objectives.
- • Evidence standards for system-generated information.
- • Sampling approaches and analytics in IT audit.
- • CAATs, log review, and configuration testing.
- • Simulation: gathering and evaluating IT audit evidence.
Reporting, Findings, and Follow-Up
- • Writing IT audit findings and recommendations.
- • Rating technology risk and control weaknesses.
- • Reporting to IT management and the audit committee.
- • Handling technical disagreement and management responses.
- • Follow-up, remediation tracking, and closure evidence.
- • Building IT audit capability and continuous learning.
- • Capstone: presenting a complete IT general controls audit.
Conclusion
By successfully completing Technology Audit Foundation, participants will gain a practical command of IT governance and control frameworks, IT general controls and application controls, technology risk assessment and control mapping, infrastructure, network and system development auditing, and IT audit evidence, reporting and follow-up. They will acquire skills in IT control assessment, access and change control testing, evidence evaluation, and IT audit reporting that provide credible assurance over technology. Gentex Training Center designs the programme to help auditors build technology audit capability with confidence.
FAQs for the Technology Audit Foundation course
— What is the "Technology Audit Foundation" course about?
It builds the core knowledge auditors need to examine IT environments with confidence. The course spans IT governance and control frameworks, IT general controls, applications, infrastructure and networks, technology risk and audit evidence, and reporting, findings and follow-up.
— What are the key benefits of the "Technology Audit Foundation" course?
You gain a practical method for technology auditing that links the technology an organisation depends on with the controls that keep it secure and reliable. The course improves IT control assessment and access and change review, strengthens risk-based IT audit planning, sharpens evidence evaluation for system-generated information, and gives you reporting and remediation tracking practice that produces credible technology assurance.
— What skills will I gain from the "Technology Audit Foundation" course?
You will develop four core skills: IT governance and framework application with COBIT, ITIL and ISO 27001, IT general controls assessment across access, change and operations, application, infrastructure and network control testing, and technology risk evaluation with IT audit evidence and reporting.
— What tools, methods, or standards are covered in the "Technology Audit Foundation" course?
The course covers IT governance and its relationship to corporate governance, the COBIT framework and its governance and management objectives, ITIL service management concepts, ISO 27001 and information security management, the auditor's role in technology and IT audit standards, IT policies, procedures and accountability structures, access management, authentication and privileged access, user administration, reviews and segregation of duties, change management and release control testing, IT operations, job scheduling and backup verification, incident management and problem resolution review, physical and environmental controls for data centres, application controls across input, processing and output, interface and batch processing controls, database controls and data integrity, operating systems, servers and virtualisation review, network architecture, firewalls and segmentation, cloud services and third-party provider assurance, technology risk assessment and risk registers, control mapping and control effectiveness evaluation, IT audit programmes, scope and objectives, evidence standards for system-generated information, sampling approaches and analytics in IT audit, CAATs, log review and configuration testing, IT audit findings and recommendations writing, rating technology risk and control weaknesses, reporting to IT management and the audit committee, handling technical disagreement and management responses, follow-up, remediation tracking and closure evidence, and building IT audit capability.
— How is the "Technology Audit Foundation" course applied in real-world practice?
Participants apply it to real work such as designing IT general controls test steps, reviewing user access and privileged accounts, testing change management and release control, auditing an application and its interfaces, verifying backups and job scheduling, gathering IT audit evidence from system logs, and presenting an IT general controls audit report. The same methods support remediation tracking and IT audit capability building.
Scheduling in Progress | Training Arranged Around Your Needs
Our team can coordinate this program based on available dates and locations. Contact us to explore training options that best fit your needs.
Introduction
Technology Audit Foundation Training Course builds the core knowledge auditors need to examine IT environments with confidence. Participants work through IT governance and control frameworks, IT general controls and application controls, technology risk assessment, auditing infrastructure and networks, auditing the systems development and change process, and IT audit evidence, reporting, and follow-up as one connected foundation. The programme links the technology an organisation depends on with the controls that keep it secure and reliable. As a result, learners gain a practical method for technology auditing. Furthermore, the course strengthens technical literacy, control judgement, and evidence discipline.
Technology Audit Foundation Course Objectives
- Explain IT governance and the auditor's role in technology.
- Apply COBIT and ITIL frameworks to IT audit work.
- Apply IT general controls across access, change, and operations.
- Apply application controls and interface testing.
- Apply technology risk assessment and control mapping.
- Audit infrastructure, networks, and operating systems basics.
- Audit system development, change management, and release control.
- Apply IT audit evidence standards and sampling approaches.
- Apply data analytics and CAATs to IT audit work.
- Apply IT audit reporting, findings, and follow-up.
Course Methodology
- Interactive sessions built on IT audit cases across sectors.
- Workshops on IT general controls, risk assessment, and control matrices.
- Group exercises on access review, change control testing, and analytics.
- Hands-on practice with IT audit programmes, checklists, and evidence logs.
- Simulation of an IT general controls audit from planning to report.
- Facilitator coaching and peer review on personal IT audit plans.
Who Should Take This Course
- Internal auditors entering technology audit.
- IT auditors and IT risk professionals.
- IT managers and system administrators supporting audits.
- Compliance and governance officers covering IT.
- Information security staff and analysts.
- Consultants advising on IT controls and audit readiness.
Technology Audit Foundation Course Outlines
IT Governance and Control Frameworks
- • IT governance and its relationship to corporate governance.
- • COBIT framework and governance and management objectives.
- • ITIL service management concepts for auditors.
- • ISO 27001 and information security management overview.
- • The auditor's role in technology and IT audit standards.
- • IT policies, procedures, and accountability structures.
- • Case discussion: an IT environment with no control ownership.
IT General Controls
- • Access management, authentication, and privileged access.
- • User administration, reviews, and segregation of duties.
- • Change management and release control testing.
- • IT operations, job scheduling, and backup verification.
- • Incident management and problem resolution review.
- • Physical and environmental controls for data centres.
- • Workshop: designing IT general controls test steps.
Applications, Infrastructure, and Networks
- • Application controls: input, processing, output.
- • Interface and batch processing controls.
- • Database controls and data integrity basics.
- • Operating systems, servers, and virtualisation review.
- • Network architecture, firewalls, and segmentation basics.
- • Cloud services and third-party provider assurance.
- • Exercise: auditing an application and its interfaces.
Technology Risk and Audit Evidence
- • Technology risk assessment and risk registers.
- • Control mapping and control effectiveness evaluation.
- • IT audit programmes, scope, and objectives.
- • Evidence standards for system-generated information.
- • Sampling approaches and analytics in IT audit.
- • CAATs, log review, and configuration testing.
- • Simulation: gathering and evaluating IT audit evidence.
Reporting, Findings, and Follow-Up
- • Writing IT audit findings and recommendations.
- • Rating technology risk and control weaknesses.
- • Reporting to IT management and the audit committee.
- • Handling technical disagreement and management responses.
- • Follow-up, remediation tracking, and closure evidence.
- • Building IT audit capability and continuous learning.
- • Capstone: presenting a complete IT general controls audit.
Conclusion
By successfully completing Technology Audit Foundation, participants will gain a practical command of IT governance and control frameworks, IT general controls and application controls, technology risk assessment and control mapping, infrastructure, network and system development auditing, and IT audit evidence, reporting and follow-up. They will acquire skills in IT control assessment, access and change control testing, evidence evaluation, and IT audit reporting that provide credible assurance over technology. Gentex Training Center designs the programme to help auditors build technology audit capability with confidence.
FAQs for the Technology Audit Foundation course
— What is the "Technology Audit Foundation" course about?
It builds the core knowledge auditors need to examine IT environments with confidence. The course spans IT governance and control frameworks, IT general controls, applications, infrastructure and networks, technology risk and audit evidence, and reporting, findings and follow-up.
— What are the key benefits of the "Technology Audit Foundation" course?
You gain a practical method for technology auditing that links the technology an organisation depends on with the controls that keep it secure and reliable. The course improves IT control assessment and access and change review, strengthens risk-based IT audit planning, sharpens evidence evaluation for system-generated information, and gives you reporting and remediation tracking practice that produces credible technology assurance.
— What skills will I gain from the "Technology Audit Foundation" course?
You will develop four core skills: IT governance and framework application with COBIT, ITIL and ISO 27001, IT general controls assessment across access, change and operations, application, infrastructure and network control testing, and technology risk evaluation with IT audit evidence and reporting.
— What tools, methods, or standards are covered in the "Technology Audit Foundation" course?
The course covers IT governance and its relationship to corporate governance, the COBIT framework and its governance and management objectives, ITIL service management concepts, ISO 27001 and information security management, the auditor's role in technology and IT audit standards, IT policies, procedures and accountability structures, access management, authentication and privileged access, user administration, reviews and segregation of duties, change management and release control testing, IT operations, job scheduling and backup verification, incident management and problem resolution review, physical and environmental controls for data centres, application controls across input, processing and output, interface and batch processing controls, database controls and data integrity, operating systems, servers and virtualisation review, network architecture, firewalls and segmentation, cloud services and third-party provider assurance, technology risk assessment and risk registers, control mapping and control effectiveness evaluation, IT audit programmes, scope and objectives, evidence standards for system-generated information, sampling approaches and analytics in IT audit, CAATs, log review and configuration testing, IT audit findings and recommendations writing, rating technology risk and control weaknesses, reporting to IT management and the audit committee, handling technical disagreement and management responses, follow-up, remediation tracking and closure evidence, and building IT audit capability.
— How is the "Technology Audit Foundation" course applied in real-world practice?
Participants apply it to real work such as designing IT general controls test steps, reviewing user access and privileged accounts, testing change management and release control, auditing an application and its interfaces, verifying backups and job scheduling, gathering IT audit evidence from system logs, and presenting an IT general controls audit report. The same methods support remediation tracking and IT audit capability building.
Partners in Learning
Our Partners in Learning include leading companies and organizations that trust Gentex Training Center for high-quality training courses and professional development programs. Together, we deliver impactful training programs that support skills growth, leadership development, and organizational excellence.
.png)
