Purpose
An IT audit is different from a financial statement audit. While a financial audit's purpose is to evaluate whether an organization is adhering to standard accounting practices, the purposes of an IT audit are to evaluate the system's internal control design and effectiveness. This includes, but is not limited to, efficiency and security protocols, development processes, and IT governance or oversight. Installing controls are necessary but not sufficient to provide adequate security. People responsible for security must consider if the controls are installed as intended, if they are effective if any breach in security has occurred and if so, what actions can be done to prevent future breaches. These inquiries must be answered by independent and unbiased observers. These observers are performing the task of information systems auditing. In an Information Systems (IS) environment, an audit is an examination of information systems, their inputs, outputs, and processing.
Read more about this topic: Information Technology Audit
Famous quotes containing the word purpose:
“I beg to assure you that I have never written you, or spoken to you, in greater kindness or feeling than now, nor with a fuller purpose to sustain you, so far as in my most anxious judgement, I consistently can. But you must act.”
—Abraham Lincoln (1809–1865)
“But this fully answered John’s purpose toward Betty, for as she did not understand, she highly admired him; and he concluded by again repeating that learning was a fine thing for a man but ‘twas both useless and blameworthy for a woman either to write or read.”
—Sarah Fielding (1710–1768)
“With the breakdown of the traditional institutions which convey values, more of the burdens and responsibility for transmitting values fall upon parental shoulders, and it is getting harder all the time both to embody the virtues we hope to teach our children and to find for ourselves the ideals and values that will give our own lives purpose and direction.”
—Neil Kurshan (20th century)