CIS 349 Week 10 Discussion IT Auditor

“IT Auditor” Please respond to the following:

Take a position on whether or not you would want to pursue a career as an IT auditor. Explain the key reasons why or why not. Determine if you would recommend this job to your family and friends. Provide a rationale for your response.

IT auditing is a mind boggling profession, including a wide range of occupation duties. Inspecting includes the audit, investigation and assessment of procedures, items, administrations, frameworks, associations and representatives. Auditors survey the exactness, legitimacy, dependability, unquestionable status and timeliness of authoritative data, and also the sources and procedures by which that data is delivered. This is a critical part, since administration and outer gatherings accordingly get a precise evaluation of the organization under their stewardship. Reviewers guarantee that checks are set up to help with the adequacy of monetary and operational reporting. They likewise ensure that controls are set up to secure an organization’s advantages. My recommendation for a family member to pursue this as a career will depend on how trustworthy and passionate they are. If they strive to be rich or worthy, I will not recommend it, because they can easily be corrupted with bribery.

Imagine you are working as an IT auditor. Identify the three (3) best practices you believe would be most useful when conducting audits for various businesses. Justify your choices

Clarification: Documentation and Policy: I have seen too often where the ‘Change Management’ strategies were not followed and critical changes were not documented.

This create havoc when systems go down and when the repair team working on it do not have the proper or current equipment configurations or wiring diagram so the repairs are impeded and it takes a lot longer than it should have.

Consistency: steady reviews and occasional evaluations guarantee that organizations are remaining consistent to the entire new security requirement. It nearly compels them to remain current or else they will be discovered lacking in the up and coming review.

Involve the right work force: Not all associate are to know everything about each framework or program, so make a point to incorporate program administrators, framework administrators, and other specialized experts in the review groups.