Whenever you are performing an audit, you will typically need to get evidence from the group that you are auditing. This evidence is used to support your audit work and critical to supporting your conclusions. When it comes to audit evidence, an ongoing question is around the difference between PBC and IPE documents. In this post, I'm going to share with you the difference … [Read more...] about What is the Difference between PBC and IPE?
There are 4 possible types of audit opinions that the auditor can provide for an audit. Unqualified Opinion: The unqualified opinion means that the report is 'clean' and the auditor did not find any issues that could impact the conclusion that the audit objectives were met. Think of the word unqualified to mean that there is no asterisk to the opinion and that the auditor is … [Read more...] about What are the Types of Audit Opinions?
I’ve worked in the IT Audit, Risk and Compliance field for many years and even teach an IT Audit course. One of the things that I see people mix up the most is the difference between Internal Audit and Compliance in an organization. These are two different functions, and each team has different responsibilities. In this post, I will break down the difference between Internal … [Read more...] about The Difference Between Internal Audit and Compliance
In this post, I will share 6 skills you need to be a successful IT Auditor. As I noted in my previous post, being an IT Auditor takes more than simply obtaining the CISA certification. Another prior post shares 5 Essential Soft Skills in the Workplace for Career Success in the technology field. This post is more specific to skills needed for IT Auditing as there … [Read more...] about 6 Skills You Need to be a Successful IT Auditor