7/25/2019 Risk Assurance_Fall 2014 GMU 12.1.14 - For Students
http://slidepdf.com/reader/full/risk-assurancefall-2014-gmu-12114-for-students 1/17
www.pwc.comwww.pwc.com
Information Technology Audit Overview
George Mason University -Fall 2014
7/25/2019 Risk Assurance_Fall 2014 GMU 12.1.14 - For Students
http://slidepdf.com/reader/full/risk-assurancefall-2014-gmu-12114-for-students 2/17
PwC
Presenters
Jaime Phillips- Risk Assurance Director [email protected]
hristina onrad - Risk Assurance !enior Associate
2
7/25/2019 Risk Assurance_Fall 2014 GMU 12.1.14 - For Students
http://slidepdf.com/reader/full/risk-assurancefall-2014-gmu-12114-for-students 3/17
PwC
Discussion Points
• Information Technology Audit
• IT Audit Professionals
• PwC and Risk Assurance
• Our Journey in the Profession• Q&A
3
7/25/2019 Risk Assurance_Fall 2014 GMU 12.1.14 - For Students
http://slidepdf.com/reader/full/risk-assurancefall-2014-gmu-12114-for-students 4/17
PwC
Information Technology IT! Audit
4
7/25/2019 Risk Assurance_Fall 2014 GMU 12.1.14 - For Students
http://slidepdf.com/reader/full/risk-assurancefall-2014-gmu-12114-for-students 5/17
PwC
IT Audit in the onte"t of #inancial
Reporting• Understanding ontrols around the systems that house and generate!inanial data
• "ompleteness• #uray •
$alidity • %estrited #ess
• %esults ditate e&tent o! detailed testing re'uired (y !inanial auditteam )i.e. how muh *ti+ing , tying they must do
• /!!iienies and e&periene allow !or more !ous and the a(ility toleverage +nowledge on wor+ ompleted outside o! the !inanial audit
Slide 5
7/25/2019 Risk Assurance_Fall 2014 GMU 12.1.14 - For Students
http://slidepdf.com/reader/full/risk-assurancefall-2014-gmu-12114-for-students 6/17
PwC
Areas of #ocus$ IT%s
• n!ormation ehnology General "ontrols )G"s
• Four G" omains
- "omputer 3perations
- rogram evelopment- rogram "hanges
- #ess to rograms and ata
Slide 6
7/25/2019 Risk Assurance_Fall 2014 GMU 12.1.14 - For Students
http://slidepdf.com/reader/full/risk-assurancefall-2014-gmu-12114-for-students 7/17
PwC
Operational Information Technology Audit
• Governane and Management o! n!ormation ehnology
• lat!orm and ehnology 5pei!i #udits• 5eurity and "y(er 5eurity
• isaster %eovery and 6usiness "ontinuity
• "loud
•ata and ata rivay
• %egulatory "ompliane )ie.7 85
Slide 7
#n operational audit is an o(jetive evaluation o!organi9ational ativities
7/25/2019 Risk Assurance_Fall 2014 GMU 12.1.14 - For Students
http://slidepdf.com/reader/full/risk-assurancefall-2014-gmu-12114-for-students 8/17
PwC
IT Audit Professionals
• "ome !rom a variety o! (a+grounds and majors• rogress through a num(er o! areer paths
• 6uild areers in (oth industry and pro!essionalservies:onsulting !irms
Slide 8
7/25/2019 Risk Assurance_Fall 2014 GMU 12.1.14 - For Students
http://slidepdf.com/reader/full/risk-assurancefall-2014-gmu-12114-for-students 9/17
PwC
"ho is PwC#
9
7/25/2019 Risk Assurance_Fall 2014 GMU 12.1.14 - For Students
http://slidepdf.com/reader/full/risk-assurancefall-2014-gmu-12114-for-students 10/17
pwc.com/campus
A&out Pw
'e provide assurance(advisory and ta" services!or over ;4< o! the largest U5pu(li and private ompanies.
) *ines of !ervice
• Assurance
• Tax
• Advisory
$%'((( partners7prinipals , sta!!aross our networ+
%')*+ partnersaross ournetwor+
157 Countries
,*'((( U5 !irmpartners7 prinipals, sta!!
-lo.al 8etwor+ o!
Firms
7/25/2019 Risk Assurance_Fall 2014 GMU 12.1.14 - For Students
http://slidepdf.com/reader/full/risk-assurancefall-2014-gmu-12114-for-students 11/17
pwc.com/campus
The lients 'e !erve
w" holds the leading position as auditor to the Glo(al Fortune =007 auditing
,/0 o! Glo(al Fortune =00 revenue> 7 inluding?
7/25/2019 Risk Assurance_Fall 2014 GMU 12.1.14 - For Students
http://slidepdf.com/reader/full/risk-assurancefall-2014-gmu-12114-for-students 12/17
PwC
Pw 'ash +etro
PwC ser1esa22ro3imately +40 o! theFortune 1000 ompanieshead'uartered in the ashington Metro region.
A22ro3imately /)(( sta!!and $%( partners wor+together in the ashington
Metro Mar+et.
12
7/25/2019 Risk Assurance_Fall 2014 GMU 12.1.14 - For Students
http://slidepdf.com/reader/full/risk-assurancefall-2014-gmu-12114-for-students 13/17
PwC
'ashington +etro +arket lients
# !ew o! our loal lientsA
13
7/25/2019 Risk Assurance_Fall 2014 GMU 12.1.14 - For Students
http://slidepdf.com/reader/full/risk-assurancefall-2014-gmu-12114-for-students 14/17
PwC
Risk Assurance
14
7/25/2019 Risk Assurance_Fall 2014 GMU 12.1.14 - For Students
http://slidepdf.com/reader/full/risk-assurancefall-2014-gmu-12114-for-students 15/17
PwC
'hat is Risk Assurance,
• %is+ #ssurane is !untionally aligned to the w" #ssurane ratie.
• %is+ #ssurane pro!essionals have the opportunity toengage in a variety o! projets and lients arossindustries7 (oth in the pu(li and private setor.
• %# pro!essionals wor+ aross lines o! servie )a&7 "ore #ssurane and #dvisory to deliver innovative solutions tolient issues and deliver support in the audit o! !inanial
statements.
15
7/25/2019 Risk Assurance_Fall 2014 GMU 12.1.14 - For Students
http://slidepdf.com/reader/full/risk-assurancefall-2014-gmu-12114-for-students 16/17
I5T6R5A7 A8DIT 96R:IC69
T;IRD PART< A998RA5C6
PROC699 A998RA5C6=
5upport in delivery o! "ore #ttest e&ternal audit servie o!!erings
• re!erred provider o! major internal audit
outsourings )inluding o-souringarrangements
• 5ar(anes-3&ley ompliane servies
• nternal #udit advisory servies )i.e.7 /&ternalBuality #ssessments7 ris+ assessments7 et.
• otential !or supplemental servie o!!erings insuh areas as loss prevention
• #udit and non-audit 55#/1C and agreed-upon
proedure reporting• %eadiness and reporting assoiated with
setor-spei!i re'uirements )i.e.7 5/" "ustody%ule7 prime (ro+er reporting7D##:D%U5
• reparedness and reporting assoiated with!uture antiipated regulatory updates )i.e.75ustaina(ility7 E6%
IT & PROJ6CT A998RA5C6• *esign and reommend ris+ and ontrol-
related servies assoiated with major /%
appliations )5#7 3rale7 other /M7inluding pre- and post-implementationreviews
• #ssessment o! program:projet ris+s againstdesired (ene!its7 and ontrols outomes
• 5eurity and privay-related o!!erings inludingseurity and vulnera(ility assessment anddiagnosti reviews and assisting ompanies inaddressing relevant regulatory re'uirements
-O:6R5A5C6' RI9> & CO?P7IA5C6• 5ervies assoiated with enterprise ris+ management
ranging !rom high level assessments to omprehensive
program development• 6usiness ontinuity planning and proess-related
o!!erings
• #ssess7 reommend and design o! proesses assoiated with e&isting and emerging regulation7 inludingsetor-spei!i re'uirements7 (road regulation )i.e.7odd-Fran+ and omprehensive programs )i.e.7 ethisand ompliane
16
Pw Risk Assurance