IT audit is the set of procedures and techniques that we use to evaluate an IT system based on predefined rules. This system can be either hardware (machines) and/or software (applications).
Audits can have different objectives:
- Analyze the efficiency of an IT system
- Verify compliance of a legislation
- Check the appropriate management of existing resources
It is common auditing projects in base a standard rule to homologate later. In these cases the audit consists in verifying point to point the rules to check.
Case Study: Software homologation
The audit consisted to examine legal rules and the system developed, and provide a report which detailed the various steps and assumptions made in case of approval or report corrections if deficiencies are found.
In this latter case, the system is retested once the errors have corrected.