Executive Development Programme in Information Systems Audit Control

The Executive Development Programme in Information Systems Audit Control is designed for mid-to-senior level professionals in the information technology, finance, and legal sectors who are responsible for overseeing or planning to oversee the audit and control functions within their organizations. It equips participants with a deep understanding of the latest methodologies, technologies, and regulatory requirements in information systems audit and control. The programme includes comprehensive modules on risk assessment, cybersecurity frameworks, data protection, and compliance with international standards such as ISO and NIST.

Participants will develop key skills in conducting thorough system audits, implementing effective control measures, and ensuring data integrity and security. They will learn to leverage advanced analytics and automation tools to enhance the efficiency and effectiveness of their audit processes. The programme also emphasizes the importance of ethical considerations in auditing, as well as strategic thinking to align audit activities with organizational goals.

The career impact of this programme is significant, as graduates will be well-prepared to lead or significantly contribute to the development and implementation of robust information systems audit and control strategies. This enhancement in skills and knowledge will enable professionals to better protect organizational assets, mitigate risks, and drive operational excellence. Graduates will be better positioned to advance to senior leadership roles or to assume greater responsibility in their current positions, contributing to their organizations' strategic objectives and regulatory compliance.

1. 1. Introduction to Information Systems Audit and Control: Learners will understand the basic principles of information systems audit and control, including legal and regulatory frameworks, and the importance of information security. They will gain foundational knowledge in conducting preliminary assessments and risk analysis.
2. 2. Auditing Information Systems Governance: This module covers the governance structures and processes of information systems, including organizational policies, procedures, and controls. Learners will learn to evaluate the effectiveness of these governance structures.
3. 3. Risk Management in Information Systems: Learners will study various risk management methodologies and techniques for identifying, assessing, and mitigating risks in information systems. They will also practice developing risk management plans.
4. 4. Controls Frameworks and Standards: This module focuses on different controls frameworks and standards such as COBIT, ISO 27001, and NIST. Learners will understand how to apply these frameworks to design and implement effective controls.
5. 5. Auditing Information Systems Security: Learners will explore security controls and audit techniques for ensuring the confidentiality, integrity, and availability of information assets. Practical skills include performing security audits and analyzing findings.
6. 6. Auditing Data Management and Privacy: This module covers data management principles and privacy laws, focusing on data protection, privacy impact assessments, and data governance. Learners will gain skills in auditing data management practices and ensuring compliance with privacy regulations.
7. 7. Advanced Auditing Techniques and Tools: Learners will delve into advanced auditing techniques and the use of modern tools for performing audits, including data analytics, forensic auditing, and audit software. They will apply these techniques to real-world scenarios.
8. 8. Auditing Emerging Technologies: This module addresses the challenges and opportunities presented by emerging technologies such as cloud computing, big data, and cybersecurity. Learners will learn to audit these technologies and assess their impact on information systems.
9. 9. Auditing Business Continuity and Disaster Recovery: Learners will study business continuity planning, disaster recovery strategies, and the importance of resilience in information systems. Practical exercises include developing business continuity plans and testing disaster recovery procedures.
10. 10. Professional Development and Ethics in Information Systems Auditing: This final module focuses on professional development, including career advancement, leadership skills, and ethical considerations in information systems auditing. Learners will reflect on their professional growth and prepare for ethical audits.