Page 7 - ITGC_Audit Guides

Contents

Executive Summary ......................................................................................................................... 1

Introduction ...................................................................................................................................... 2
Conformance with The IIA’s Code of Ethics and Standards ........................................................... 3

Relationship with the Business and Overall IT Governance ........................................................... 5
Business Enablement – the Goal of IT ............................................................................................ 5

IT as a Business .............................................................................................................................. 6
Process Oversight: IT Service Delivery and Project Portfolio Management ................................... 7
Ongoing Monitoring: Quality and Compliance Needs/Activities ...................................................... 8
Challenges and Risks for IT Governance and the IT and Business Relationship ........................... 8

IT Infrastructure ............................................................................................................................. 11

Main Components.......................................................................................................................... 11
Infrastructure Challenges and Risks ............................................................................................. 19
IT Network ..................................................................................................................................... 21

Defining a Network ........................................................................................................................ 21
Network Components and Concepts ............................................................................................. 28
Network Hosts and Nodes ............................................................................................................. 28

Network Defense ........................................................................................................................... 33
Network Challenges and Risks ...................................................................................................... 33

Applications ................................................................................................................................... 35
Application Architecture ................................................................................................................. 35
Application Development and Maintenance .................................................................................. 37

Applications Challenges and Risks ............................................................................................... 40
Additional and Emerging IT Topics................................................................................................ 42
Data Management ......................................................................................................................... 42

Data Analytics ................................................................................................................................ 43
Social Media .................................................................................................................................. 44

Robotic Process Automation ......................................................................................................... 44
Machine Learning and Artificial Intelligence .................................................................................. 45
Internet of Things (IoT) .................................................................................................................. 46
Challenges for Additional and Emerging IT Topics ....................................................................... 46

Conclusion ..................................................................................................................................... 47

theiia.org