IT Auditor ICT Professionals
SaveWhat Does an IT Auditor Do?
IT auditors perform audits of information systems, platforms, and operating procedures in accordance with established corporate standards for efficiency, accuracy and security. They evaluate ICT infrastructure in terms of risk to the organisation and establish controls to mitigate loss. They determine and recommend improvements in the current risk management controls and in the implementation of system changes or upgrades.
Resource recommendations may include affiliate links. Learn more
Organisational Resilience
The strategies, methods and techniques that increase the organisation's capacity to protect and sustain the services and operations that fulfil the organisational mission and create lasting values by effectively addressing the combined issues of security, preparedness, risk and disaster recovery.
These are common skills for this role, based on a European framework. Requirements vary between jobs, including in the UK. Real-world experience matters more than ticking every box - use this as a guide, not a checklist.
Skills You Need to Become an IT Auditor
Essential Skills
Essential Skills
-
EssentialOrganisational Resilience knowledge
The strategies, methods and techniques that increase the organisation's capacity to protect and sustain the services and operations that fulfil the organisational mission and create lasting values by effectively addressing …
Recommended Books
3 books -
EssentialICT Security Standards knowledge
The standards regarding ICT security such as ISO and the techniques required to ensure compliance of the organisation with them.
Recommended Books
1 book -
EssentialICT Process Quality Models knowledge
The quality models for ICT services which address the maturity of the processes, the adoption of recommended practices and their definition and institutionalisation that allow the organisation to reliably and …
No book recommendations available yet.
-
EssentialICT Security Legislation knowledge
The set of legislative rules that safeguards information technology, ICT networks and computer systems and legal consequences which result from their misuse. Regulated measures include firewalls, intrusion detection, anti-virus software …
No book recommendations available yet.
-
EssentialAudit Techniques knowledge
The techniques and methods that support a systematic and independent examination of data, policies, operations and performances using computer-assisted audit tools and techniques (CAATs) such as spreadsheets, databases, statistical analysis …
Recommended Books
1 book -
EssentialSystems Development Life-cycle knowledge
The sequence of steps, such as planning, creating, testing and deploying and the models for the development and life-cycle management of a system.
No book recommendations available yet.
-
EssentialLegal Requirements Of ICT Products knowledge
The international regulations related to the development and use of ICT products.
Recommended Books
1 book -
EssentialEngineering Processes knowledge
The systematic approach to the development and maintenance of engineering systems.
No book recommendations available yet.
-
EssentialICT Quality Policy knowledge
The quality policy of the organisation and its objectives, the acceptable level of quality and the techniques to measure it, its legal aspects and the duties of specific departments to …
No book recommendations available yet.
-
EssentialProduct Life-cycle knowledge
The management of the life-cycle of a product from the development stages to the market entry and market removal.
No book recommendations available yet.
-
EssentialQuality Standards knowledge
The national and international requirements, specifications and guidelines to ensure that products, services and processes are of good quality and fit for purpose.
No book recommendations available yet.
-
EssentialExecute ICT Audits skill
Organise and execute audits in order to evaluate ICT systems, compliance of components of systems, information processing systems and information security. Identify and collect potential critical issues and recommend solutions …
Course recommendations coming soon.
-
EssentialImprove Business Processes skill
Optimise the series of operations of an organisation to achieve efficiency. Analyse and adapt existing business operations in order to set new objectives and meet new goals.
Course recommendations coming soon.
-
EssentialPerform Quality Audits skill
Course recommendations coming soon.
-
EssentialPrepare Financial Auditing Reports skill
Compile information on audit findings of financial statements and financial management in order to prepare reports, point out improvement possibilities, and confirm governability.
Course recommendations coming soon.
-
EssentialAnalyse ICT System skill
Study the activity and performance of information systems in order to model their usage and weaknesses, specify purpose, architecture and services and discover operations and procedures for accomplishing them most …
Course recommendations coming soon.
-
EssentialDevelop Audit Plan skill
Define all organisational tasks (time, place and order) and develop a checklist concerning the topics to be audited.
Course recommendations coming soon.
-
EssentialEnsure Adherence To Organisational ICT Standards skill
Guarantee that the state of events is in accordance with the ICT rules and procedures described by an organisation for their products, services and solutions.
Course recommendations coming soon.
-
EssentialPerform Security Vulnerability Assessments skill
Execute types of security testing, such as network penetration testing, wireless testing, code reviews, wireless and/or firewall assessments in accordance with industry-accepted methods and protocols to identify and analyse potential …
Course recommendations coming soon.
Optional Skills (5 of 17 displayed)
-
OptionalICT Network Security Risks knowledge
The security risk factors, such as hardware and software components, devices, interfaces and policies in ICT networks, risk assessment techniques that can be applied to assess the severity and the …
Recommended Books
1 book -
OptionalICT Project Management knowledge
The methodologies for the planning, implementation, review and follow-up of ICT projects, such as the development, integration, modification and sales of ICT products and services, as well as projects relating …
Recommended Books
1 book -
OptionalCloud Technologies knowledge
The technologies which enable access to hardware, software, data and services through remote servers and software networks irrespective of their location and architecture.
No book recommendations available yet.
-
OptionalInformation Security Strategy knowledge
The plan defined by a company which sets the information security objectives and measures to mitigate risks, define control objectives, establish metrics and benchmarks while complying with legal, internal and …
No book recommendations available yet.
-
OptionalICT Accessibility Standards knowledge
The recommendations for making ICT content and applications more accessible to a wider range of people, mostly with disabilities, such as blindness and low vision, deafness and hearing loss and …
No book recommendations available yet.
-
OptionalWorld Wide Web Consortium Standards knowledge
The standards, technical specifications and guidelines developed by the international organisation World Wide Web Consortium (W3C) which allow the design and development of web applications.
No book recommendations available yet.
-
OptionalCyber Security knowledge
The methods that protect ICT systems, networks, computers, devices, services, digital information and people against illegal or unauthorised use.
No book recommendations available yet.
-
OptionalApply Information Security Policies skill
Implement policies, methods and regulations for data and information security in order to respect confidentiality, integrity and availability principles.
Course recommendations coming soon.
-
OptionalDevelop Documentation In Accordance With Legal Requirements skill
Create professionally written content describing products, applications, components, functions or services in compliance with legal requirements and internal or external standards.
Course recommendations coming soon.
-
OptionalIdentify Legal Requirements skill
Conduct research for applicable legal and normative procedures and standards, analyse and derive legal requirements that apply to the organisation, its policies and products.
Course recommendations coming soon.
-
OptionalManage IT Security Compliances skill
Guide application and fulfilment of relevant industry standards, best practices and legal requirements for information security.
Course recommendations coming soon.
-
OptionalMonitor Technology Trends skill
Survey and investigate recent trends and developments in technology. Observe and anticipate their evolution, according to current or future market and business conditions.
Course recommendations coming soon.
-
OptionalCommunicate Analytical Insights skill
Obtain analytical insights and share them with relevant teams, in order to enable them to optimise supply chain (SC) operations and planning.
Course recommendations coming soon.
-
OptionalDefine Organisational Standards skill
Write, implement and foster the internal standards of the company as part of the business plans for the operations and levels of performance that the company intends to achieve.
Course recommendations coming soon.
-
OptionalDevelop ICT Workflow skill
Create repeatable patterns of ICT activity within an organisation which enhances the systematic transformations of products, informational processes and services through their production.
Course recommendations coming soon.
-
OptionalIdentify ICT Security Risks skill
Apply methods and techniques to identify potential security threats, security breaches and risk factors using ICT tools for surveying ICT systems, analysing risks, vulnerabilities and threats and evaluating contingency plans.
Course recommendations coming soon.
-
OptionalInform On Safety Standards skill
Inform managers and staff regarding workplace health and safety standards,,especially in the case of dangerous environments, such as in the construction or mining industry.
Course recommendations coming soon.