Information systems audit considerations

Objective: To maximise the effectiveness of and to minimise interference to/from the information system audit process.

There should be controls to safeguard operational systems and audit tools during system audits.

Information systems audit controls

Audits of operational systems should be planned and agreed.

Protection of information systems audit tools

Access to system audit tools should be controlled.