Risk Assurance_Fall 2014 GMU 12.1.14 - For Students

7/25/2019 Risk Assurance_Fall 2014 GMU 12.1.14 - For Students

http://slidepdf.com/reader/full/risk-assurancefall-2014-gmu-12114-for-students 1/17

www.pwc.comwww.pwc.com

Information Technology Audit Overview

George Mason University -Fall 2014



PwC

Presenters

Jaime Phillips- Risk Assurance Director [email protected]

hristina onrad - Risk Assurance !enior Associate

[email protected]

2



PwC

Discussion Points

• Information Technology Audit

• IT Audit Professionals

• PwC and Risk Assurance

• Our Journey in the Profession• Q&A

3



PwC

Information Technology IT! Audit

4



PwC

IT Audit in the onte"t of #inancial

Reporting• Understanding ontrols around the systems that house and generate!inanial data

• "ompleteness• #uray •

$alidity • %estrited #ess

• %esults ditate e&tent o! detailed testing re'uired (y !inanial auditteam )i.e. how muh *ti+ing , tying they must do

• /!!iienies and e&periene allow !or more !ous and the a(ility toleverage +nowledge on wor+ ompleted outside o! the !inanial audit

Slide 5



PwC

Areas of #ocus$ IT%s

• n!ormation ehnology General "ontrols )G"s

• Four G" omains

- "omputer 3perations

- rogram evelopment- rogram "hanges

- #ess to rograms and ata

Slide 6



PwC

Operational Information Technology Audit

• Governane and Management o! n!ormation ehnology

• lat!orm and ehnology 5pei!i #udits• 5eurity and "y(er 5eurity

• isaster %eovery and 6usiness "ontinuity

• "loud

•ata and ata rivay

• %egulatory "ompliane )ie.7 85

Slide 7

#n operational audit is an o(jetive evaluation o!organi9ational ativities



PwC

IT Audit Professionals

• "ome !rom a variety o! (a+grounds and majors• rogress through a num(er o! areer paths

• 6uild areers in (oth industry and pro!essionalservies:onsulting !irms

Slide 8



PwC

"ho is PwC#

9



pwc.com/campus

A&out Pw

'e provide assurance(advisory and ta" services!or over ;4< o! the largest U5pu(li and private ompanies.

) *ines of !ervice

• Assurance

• Tax

• Advisory

$%'((( partners7prinipals , sta!!aross our networ+

%')*+ partnersaross ournetwor+

157 Countries

,*'((( U5 !irmpartners7 prinipals, sta!!

-lo.al 8etwor+ o!

Firms



pwc.com/campus

The lients 'e !erve

w" holds the leading position as auditor to the Glo(al Fortune =007 auditing

,/0 o! Glo(al Fortune =00 revenue> 7 inluding?



PwC

Pw 'ash +etro

PwC ser1esa22ro3imately +40 o! theFortune 1000 ompanieshead'uartered in the ashington Metro region.

A22ro3imately /)(( sta!!and $%( partners wor+together in the ashington

Metro Mar+et.

12



PwC

'ashington +etro +arket lients

# !ew o! our loal lientsA

13



PwC

Risk Assurance

14



PwC

'hat is Risk Assurance,

• %is+ #ssurane is !untionally aligned to the w" #ssurane ratie.

• %is+ #ssurane pro!essionals have the opportunity toengage in a variety o! projets and lients arossindustries7 (oth in the pu(li and private setor.

• %# pro!essionals wor+ aross lines o! servie )a&7 "ore #ssurane and #dvisory to deliver innovative solutions tolient issues and deliver support in the audit o! !inanial

statements.

15



I5T6R5A7 A8DIT 96R:IC69

T;IRD PART< A998RA5C6

PROC699 A998RA5C6=

5upport in delivery o! "ore #ttest e&ternal audit servie o!!erings

• re!erred provider o! major internal audit

outsourings )inluding o-souringarrangements

• 5ar(anes-3&ley ompliane servies

• nternal #udit advisory servies )i.e.7 /&ternalBuality #ssessments7 ris+ assessments7 et.

• otential !or supplemental servie o!!erings insuh areas as loss prevention

• #udit and non-audit 55#/1C and agreed-upon

proedure reporting• %eadiness and reporting assoiated with

setor-spei!i re'uirements )i.e.7 5/" "ustody%ule7 prime (ro+er reporting7D##:D%U5

• reparedness and reporting assoiated with!uture antiipated regulatory updates )i.e.75ustaina(ility7 E6%

IT & PROJ6CT A998RA5C6• *esign and reommend ris+ and ontrol-

related servies assoiated with major /%

appliations )5#7 3rale7 other /M7inluding pre- and post-implementationreviews

• #ssessment o! program:projet ris+s againstdesired (ene!its7 and ontrols outomes

• 5eurity and privay-related o!!erings inludingseurity and vulnera(ility assessment anddiagnosti reviews and assisting ompanies inaddressing relevant regulatory re'uirements

-O:6R5A5C6' RI9> & CO?P7IA5C6• 5ervies assoiated with enterprise ris+ management

ranging !rom high level assessments to omprehensive

program development• 6usiness ontinuity planning and proess-related

o!!erings

• #ssess7 reommend and design o! proesses assoiated with e&isting and emerging regulation7 inludingsetor-spei!i re'uirements7 (road regulation )i.e.7odd-Fran+ and omprehensive programs )i.e.7 ethisand ompliane

16

Pw Risk Assurance



PwC

Q&A

17

Documents

Risk Assurance_Fall 2014 GMU 12.1.14 - For Students