Skip to content

IT Audit

What is IT Audit?

An examination of an organization's information technology infrastructure, policies, and operations to determine whether controls adequately protect assets.

Audit and Assurance

Frameworks that govern it audit

ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →

What the standards actually require on it audit

Requirements naming it audit across 2 standards, quoted from the control text.

Monetary Authority of Singapore Technology Risk Management Guidelines1 control

Implement IT Audit + Third-Party Risk Management per MAS TRM Chapters 14 + 15 + MAS Notice 658 on Outsourcing. Chapter 14 IT Audit - IT audit charter approved by Board Audit Committee + IT audit plan risk-based + IT audit methodology + IT auditor competency (C...

MAS-TRM-Third-Party-IT-Audit-Chapters-14-15-Outsourcing-Notice-658-Concentration-Risk-Exit-Strategy · MAS TRM Third Party + IT Audit + Chapters 14-15 + Outsourcing + Notice 658 + Concentration Risk + Exit Strategy →
Bermuda Monetary Authority (BMA) Cyber Risk Management Code of Conduct1 control

IT Audit Plan. The third line of defence, IT audit, should provide the audit committee of the board (or equivalent) with independent assurance over the cyber risk programme through a risk-based IT audit plan (para 23).

BMA-7 · Information Technology Audit Plan →

Questions people ask about it audit

What is IT Audit?
An examination of an organization's information technology infrastructure, policies, and operations to determine whether controls adequately protect assets.
Why is IT Audit important for compliance?
IT Audit is a key concept in Audit and Assurance. Understanding it audit helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address IT Audit?
IT Audit appears in the requirement text of Monetary Authority of Singapore Technology Risk Management Guidelines, Bermuda Monetary Authority (BMA) Cyber Risk Management Code of Conduct. Across these standards we have identified 2 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about IT Audit?
Explore our compliance framework pages to see how it audit applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how IT Audit applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.