Page 27 - Courses

IT Essentials — Introduction to IT

TOPIC 1: UNDERSTANDING IT OPERATIONS

Introduction

Technology is an integral part of every organization and underpins almost every piece of data, every
transaction or calculation, and every process or business activity. Internal auditors need a basic
understanding of underlying information technology (IT) concepts and operations. Without this,
internal auditors may not fully comprehend IT objectives and the associated risks, and may lack the
ability to assess or audit the design or effectiveness of controls related to those risks.

This course introduces basic IT concepts, related risks and controls, and IT governance, with an
emphasis on the significant role that IT operations perform in enabling organizational success. It
prepares internal auditors with fundamentals for building proficiencies needed to perform IT-related
internal audit assurance services.

Learning Objectives

• Describe IT operations.

• Identify risks and controls related to IT.

• Describe risks and controls related to IT.

• Recognize the purpose and applications of IT control frameworks and basic IT controls.

• Describe IT governance.

• Describe IT competencies for internal auditors.

Common Terminology

Add Value
Value is provided by improving opportunities to achieve organizational objectives, identifying
operational improvement, and/or reducing risk exposure thorough both assurance and consulting
services.

Board
The highest level governing body (e.g., a board of directors, a supervisory board, or a board of
governors or trustees) charged with the responsibility to direct and/or oversee the organization’s
activities and hold senior management accountable.

Copyright © 2020 by The Institute of Internal Auditors, Inc. All rights reserved.