In my pursuit to get into the information technology (IT) audit field, I must learn about setting controls for securing IT assets, minimizing risk, and eventually testing that said controls work.\u00a0 In major organizations where information flows constantly and is utilized to advance the organization’s goals, ensuring that the information and knowledge are accurate, intact, timely, and secure are important.\u00a0 To secure them, though, management must know how this information and knowledge can be lost.\u00a0 Once they understand this, controls must be put into place so as to prevent this loss.\u00a0 But management cannot always safeguard these assets.<\/p>\n
As a company moves along in its financial year, these controls can break down.\u00a0 For example, backups can be corrupted (losing information), and employees may leave the company (thus losing knowledge).\u00a0 So it is also good to reassess whether these controls are working as intended.\u00a0 This is where the IT auditor steps in, to evaluate these controls, and see to it that that continue to do the job.<\/p>\n
Though I know of some ways of testing these controls (e.g. vouching, interviews, and walkthroughs), I have never carried them out.\u00a0 All I have done is study them.\u00a0 While studying textbooks is fine, some would say the true teacher is experience, and I have not done so.\u00a0 For the most part, I have managed a couple of websites (this one included) so that they cannot be hacked.\u00a0 I have put controls in place to ensure that my website is not compromised.\u00a0 But to make sure they work, I must turn to someone who has had experience in managing a website.\u00a0 Not just that, but an IT auditor who will teach me what to exactly do so that this website is not damaged.\u00a0 Eventually, I would learn more from them so that, when I am on an audit engagement, I can ensure that the company’s valuable assets are kept safe.<\/p>\n","protected":false},"excerpt":{"rendered":"
In my pursuit to get into the information technology (IT) audit field, I must learn about setting controls for securing IT assets, minimizing risk, and eventually testing that said controls work.\u00a0 In major organizations where information flows constantly and is utilized to advance the organization’s goals, ensuring that the information and knowledge are accurate, intact, […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2,7],"tags":[62,35,61,55,60,34],"class_list":["post-143","post","type-post","status-publish","format-standard","hentry","category-finance","category-information-technology","tag-assessment","tag-audit","tag-controls","tag-design","tag-it-audit","tag-management"],"_links":{"self":[{"href":"https:\/\/www.jasonsblog.place\/index.php\/wp-json\/wp\/v2\/posts\/143","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.jasonsblog.place\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.jasonsblog.place\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.jasonsblog.place\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.jasonsblog.place\/index.php\/wp-json\/wp\/v2\/comments?post=143"}],"version-history":[{"count":4,"href":"https:\/\/www.jasonsblog.place\/index.php\/wp-json\/wp\/v2\/posts\/143\/revisions"}],"predecessor-version":[{"id":148,"href":"https:\/\/www.jasonsblog.place\/index.php\/wp-json\/wp\/v2\/posts\/143\/revisions\/148"}],"wp:attachment":[{"href":"https:\/\/www.jasonsblog.place\/index.php\/wp-json\/wp\/v2\/media?parent=143"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.jasonsblog.place\/index.php\/wp-json\/wp\/v2\/categories?post=143"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.jasonsblog.place\/index.php\/wp-json\/wp\/v2\/tags?post=143"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}