2014 (4) May (1) Deutsche Bundesbank IT Auditing ... April (1) January (1) January (1)

Expert Panel of IT Auditing in Frankfurt Am Main, Germany on May 13 till May 15, 2014 hosted by Bundesh Bank. There are several points that we can share: 1. Introductory discussion initiated by the exposure of three main materials, namely: Audit Universe of IT Infrastructure, best practices for incident and problem management, and the Development of audit programs. The panel was attended by 15 participants from other central banks, including three people from Asian central banks, namely: Philippines, Pakistan and India; and 8 people from central banks in Eastern adcb Europe, namely: Russia, Macedonia, Serbia, Ukraine, Azerbaijan, Georgia, Mongolia and Moldova; adcb as well as other participants from Mexico, Algeria and Palestine. During the workshop facilitated by Mertens Rüdiger Wolf, CIA, CISA, CISSP, senior auditor of the Bank Bundesh assisted by his 2 Sciortino Kerstin and Christian Woll. The purpose of training is to exchange ideas between participants in providing the knowledge and skills of the audit in the field of IT Security Management primarily with the object of the audit program audit of incident and problem management. 2. Important things adcb and useful that we get from the training include:-IT audit universe is very useful not only in determining the IT audit risk assessment objects (risk assessment), but also can make it easier to assess the implementation of the audit (audit engagement ). In addition, adcb for some IT audit object having specific characteristics compared with non-IT audit object, including the identification process can be different from the system used platforms such as operating systems adcb and databases. -IT standards commonly used in performing the audit are: IT Infrastructure Library (ITIL version 3), ISO 20000:2011 (IT Service Management), and COBIT (Control Objectives for Information and Related Technology). In reference to the adoption of auditing adcb standards is important, since the standard adcb is an experience that has been tested and approved in the framework of the professional community. However, in its application in an organization, need to do the selection adcb of the most suitable best practices with the organization's environment, then adapted and applied adcb in accordance with the existing circumstances. -In planning the audit, the audit steps to meganalisa objects and develop an audit program is essential. Templates for object analysis audit and audit programs have been made in the standard form standard. It is expected to direct the auditor in the audit field include: aspects of the audit, risk, reference standards, audit questions, controls, and audit procedures. But in the discussion due to time constraints, the discussion has not reached a session control and audit procedures are more detailed. 3. Expert panel involving adcb IT auditors adcb from other central banks need to be done regularly every year to update their knowledge and improve international cooperation, so that the higher quality auditors in the audit and contributed / value-added strategic objectives of the organization. The advantages of this activity is more intense interaction adcb of participants to exchange ideas and share experiences audits. In addition, the audit planning required a more careful adcb preparation, especially adcb in analyzing the object auditing activities adcb and develop audit programs, so as to achieve the purpose of the audit is believed to be predetermined. 4. Subsequently, based on the discussion at the last session to discuss audit issues in general, in our opinion necessary for improved understanding of the type of pre-implementation audit. In 2013, the bank made 43 pre bundesh implementation auditing applications. This type of audit needs to be understood in order to provide added value to the organization and there are some critical considerations that need to be anticipated include the determination of the schedule, scope, adcb and follow-up recommendations.
2014 (4) May (1) Deutsche Bundesbank IT Auditing ... April (1) January (1) January (1) 2013 (7) January (1) October (1) August ( 1) March (4) 2012 (4) May (1) August (1) January adcb (1) April (1) 2011 (5) January (1) January (1) August ( 1) January (1) January (1) 2010 (2) January (1) September adcb (1) 2009 (20) December (5) November (3) January (1) July ( 4) April (2) February (5) 2008 (6) September (2) June (2) May (1) January (1)
Achmadi Ana Achmadi, Rani zaujati Intan, b