FloBiz Training Sessions

Auditing/Monitoring IT Systems Development Projects/SDLC

Course Description

IT systems development projects fail to meet expectations of management and primary stakeholders at an alarming rate.  Project challenges negatively impact organizations customers, financial position and productivity.  This session will provide auditors with key information to better facilitate performance of assurance audits and non-audit/advisory services related to core IT systems development projects.  Project phases and the corresponding key controls to reduce risk will be reviewed/discussed.  Also, important elements for audit project planning, including risk assessment activities and sample audit programs, will be provided with examples to assist in the development of an audit/monitoring process.  Real life examples of IT project challenges and lesson learned will be shared.  Attend this training to strengthen your approach to auditing IT systems development projects.

In this training, we will discuss the following important issues:

  • Project risks
  • Project management triangle
  • Participation, roles & responsibilities (Project Responsibility Matrix, Charter, etc.)
  • Project management methodologies
  • Executive management sponsors
  • Risk management
  • Phases
  • Internal audit’s role
  • Risk assessment/audit plans
  • Audit programs/monitoring
  • Key controls
  • Status reporting
  • Vendor management
  • Post implementation reviews

Learning Objectives

  • Review/discuss the barriers to completion of successful IT system development projects
  • Identify/review the different system development life cycle (SDLC) methodologies
  • Understand the key elements of the IT system development life cycle
  • Identify/discuss key project risks
  • Review/learn about primary project controls
  • Review the different participation roles for internal audit
  • Learn how to develop an audit/monitoring plan for IT system development projects
  • Review engagement audit plans/activities for key aspects of the system development projects
  • Provide examples of lessons learned and leading practices
  • Identify/share auditor training needs and key reference materials/resources for future use

After completing this training, you will be able to:

  • Understand the challenges & risks associated with IT system development projects
  • Identify & test IT systems development project controls
  • Assess project risks & plan audit activities to provide assurance and/or minimize risk
  • Conduct audits and/or monitoring of project high risk areas
  • Highlight problem areas to assist project management in receiving additional resources/ support

Who Should Attend

  • Auditors/IT auditors with three or more years auditing experience
  • More experienced auditors (greater than five years’ experience) that want a refresher on auditing IT systems developments projects/systems development life cycle

Prerequisites

3 years or more auditing experience with IT audit experience being a plus

Level: Intermediate

Field: Business Management & Organization

CPE Credits: 8 (400 minutes) - 1 Day; 16 (800 minutes) - 2 Day

Delivery Method: Live - Group

   

Course Outline

Barrier to successful IT systems development projects

Phases of projects

SDLC Methodologies

Project risks & controls

Project management

Risk assessment/monitoring

Validation of project milestones & deliverables

Auditing IT system development projects

Audit activities (including audit programs)

Tips, lessons learned & leading practices

Communication/awareness activities for management/audit committee/board

Reference materials/resources for future use

Exercises will be used to reinforce the learning objectives. Some examples are:

  • New Project Start-up – Potential Challenges/Risks
  • Assessing Risks
  • Monitoring Projects
  • Training Needs/Tools

Also, some project audit programs and other tips will be provided for use in implementing IT system development projects audits.

Note: This training can be provided in one or two day sessions.  The one day training will be a condensed with a reduced emphasis on the number of exercises/case studies performed, audit programs reviewed and review of the reporting approach/process.

 


View/Download PDF Version of the Couse Descripton




Contact Phil Flora for additional information or a proposal: phil@flobizllc.com