Audit Methodology for IT Governance

Abstract

The continuous development of the new IT technologies was followed up by a rapid integra-tion of them at the organization level. The management of the organizations face a new chal-lenge: structural redefinition of the IT component in order to create plus value and to minim-ize IT risks through an efficient management of all IT resources of the organization. These changes have had a great impact on the governance of the IT component. The paper proposes an audit methodology of the IT Governance at the organization level. From this point of view the developed audit strategy is a strategy based on risks to enable IT auditor to study from the best angle efficiency and effectiveness of the IT Governance structure. The evaluation of the risks associated with IT Governance is a key process in planning the audit mission which will allow the identification of the segments with increased risks. With now ambition for com-pleteness, the proposed methodology provides the auditor a useful tool in the accomplishment of his mission.