Essentials of Internal Auditing

This part covers the foundational knowledge for internal auditing, including key concepts, principles, and ethical guidelines. It familiarizes candidates with audit terminology, the role of internal audits, and essential techniques for effective planning and execution.

Practice of Internal Auditing

This section focuses on the hands-on application of audit theory. It explains the practical methods used in planning, conducting, and reporting audits, with an emphasis on risk-based auditing and control assessment to identify inefficiencies and recommend improvements.

Business Knowledge for Internal Auditing

This component provides an overview of business fundamentals that impact internal auditing. It covers how organizational structures, processes, and strategic goals influence risk and control environments, equipping professionals to relate audit findings to overall business performance.

Information System Auditing Process

This domain describes how IT auditors adhere to established standards to safeguard and control information systems. It includes creating risk-based audit strategies, planning and executing audits, conducting control self-assessments, and communicating findings with coordinated follow-up actions.

Governance and Management of IT

This domain evaluates whether an organization has the essential frameworks and processes in place. Auditors review the IT strategy, governance, organizational and HR structures, relevant policies, IT resource management, risk practices, controls, KPIs, and business continuity planning.

Information Systems Acquisition, Development, and Implementation

This domain ensures IT auditors verify the alignment of information systems acquisition, development, testing, and implementation with organizational objectives. It involves assessing business cases, evaluating IT supplier selection, reviewing project management frameworks, and conducting post-implementation reviews.

Information Systems Operations, Maintenance and Support

This domain ensures IT auditors assess whether an organization's IT operations, maintenance, and support processes align with its objectives. It includes evaluating IT service management frameworks, reviewing system operations, database management, incident and problem management, change and release procedures, and disaster recovery testing.

Protection of Information Assets

This domain ensures IT auditors assess whether an organization's security policies, standards, and procedures effectively protect the confidentiality, integrity, and availability of its information assets. It involves evaluating information systems and privacy measures, physical and environmental controls, and overall information security programs.