Tatakelola dan audit ti Indri Sudanawati Rozas

KONTRAK ---------------------------- UTS ---------------------------- Penyampaian Kontrak Perkuliahan. Overview Tatakelola dan Audit TI. Definisi Tatakelola TI. Urgensi Tatakelola TI. Implementasi Tatakelola TI. Tugas I: Tatakelola TI [SOP+WI] Framework2 Tatakelola TI. Why framework? Positioning framework. How to implement Tatakelola TI. Pembahasan Tugas I Tatakelola TI. Definisi Audit TI. Skill auditor TI. Softskill vs hardskill. Metodologi Audit TI. Framework Audit TI. Menentukan Ruang lingkup Audit TI. BG – ITG – ITP. RACI chart. Interview. Kuisioner. Observasi. Analisis Kondisi Eksisting. Maturity Level tool. Scale [0; 0,33; 0,66; 1]. Maturity level. Control Objectives. Rekomendasi Audit TI. Laporan Audit. Spider Chart. Executive Summary. Tugas II: Eksplorasi judul penelitian di bidang Tatakelola dan Audit TI. Pembahasan Tugas II, Bab 1 sd Bab 3. ---------------------------- UTS ---------------------------- ---------------------------- UAS ----------------------------

DEFINISI Systematic, independent and documented process for obtaining audit evidence and evaluating it objectively to determine the extent to which the audit criteria are fulfilled. Proses pengumpulan dan evaluasi fakta/bukti untuk menentukan apakah sistem yang terkomputerisasi: Menjaga aset Memelihara integritas data Memampukan komunikasi & akses informasi Mencapai tujuan operasional secara efektif Mengkonsumsi sumber daya secara efisien

Apakah divisi IT bisa membantu meningkatkan kinerja perusahaan? OVERVIEW Perusahaan Apakah divisi IT bisa membantu meningkatkan kinerja perusahaan? Divisi x Divisi x Continuous improvement Divisi x PROSES AUDIT TI Divisi x Divisi IT output Nilai Maturity Level (1-5) Rekomendasi

STEPS of it audit process Planning Definition of audit objectives and scope Evaluation of control Evidence collection Evaluation of evidence Reporting and follow up http://www.icisa.cag.gov.in

To be an auditor IT auditors must acquire the right hard and soft skills, Get the appropriate education Build a solid foundation of experience.

Auditor Skills Hardskill Softskill strong understanding of general computer controls (GCCs) data analytics basic system infrastructure risk assessment Softskill translating geek speak to business speak ability to convey IT issues grasp the severity of the situation recommendations to mitigate the risk Cliff Donathan, CIA, CISA, CISSP sumber http://www.theiia.org/intAuditor/itaudit/2012-articles/so-you-want-to-be-an-it-auditor/

top seven AUDITOR skills From IIA’s survey of 461 internal audit professionals in North America: Analytical and critical thinking – 73% Communication skills – 61% Data mining and analytics – 50% General IT knowledge – 49% Business acumen – 46% Industry-specific knowledge – 34% Risk management – 33%

Sumber: @pervertauditor Knowledge Interpersonal skill Willingness to learn Skeptisme Analytical thinking Mental baja http://saputraroy.com/2013/01/18/wawancaur-pervertauditor/

AUDITOR SOFTSKILL 1. Jujur 2. Disiplin 3. Bertanggung Jawab 4. Ramah 5. Sopan 6. Cepat beradaptasi 7. Hardworker 8. Teliti 9. Cerdas 10. Peka 11. Empati 12. Perhatian 13. Teamwork 14. Leadership 15. Loyalitas 16. Komunikasi 17. Critical Observation 18. Problem Solving 19. Complication http://repository.upi.edu/operator/upload/d_pu_1009675_chapter2.pdf

Tipe pertanyaan Tipe Tertutup: Tipe Terbuka dan Penjelasan Kebaikan: cepat, mudah. Keburukan: teraudit harus memutuskan apakah harus menjawab “ya” atau “tidak” (tidak ada penjelasan). Tipe Terbuka dan Penjelasan Kebaikan: mengetahui jawaban secara rinci. Keburukan: menghabiskan banyak waktu dan biaya.