IT Examiner School - Oct 2023

Internal Use Only

Summary • Audits are a necessity whether performed by in ‐ house and/or external resources • Must be performed by independent and qualified individuals/companies • Based on a current risk assessment • Must provide written, detailed, stand ‐ alone reports • Results must be reported to the Board’s Audit Committee or a related Board Committee in a timely manner • Audits can aid in exam scope reduction

47