Eight scope of Information Technology Audit

1. Application of risk-oriented audit approaches

2. Use of computer-assisted audit tools and techniques

3. Application of standards (national or international) such as ISO 9000/3 and ISO 17799 to improve and implement quality systems in software development and meet security standards

4. Understanding of business roles and expectations in the auditing of systems under development as well as the purchase of software packaging and project management

5. Assessment of information security and privacy issues which can put the organization at risk

6. Examination and verification of the organization’s compliance with any IT-related legal issues that may jeopardize or place the organization at risk

7. Evaluation of complex systems development life cycles (SDLC) or new development techniques (e.g., prototyping, end user computing, rapid systems, or application development)

8. Reporting to management and performing a follow-up review to ensure actions taken at work