|
About this electronic catalog: Welcome to ARTI Global’s virtual course catalog. This catalog contains details about our courses, in a format similar to those you would find in paper-based catalogs you receive once or twice a year (maybe more?), but better!. With this electronic system you do not have paper pages to go through. Here you find a particular title, click on it and you are there! You want to go back to the index, not a problem at the bottom of the course description section we have provided links that take you back to this page. You want your employees or colleagues to pick and chose or just look at courses they want to take? Well this electronic catalog can be looked at by ALL of your employees/colleagues at the same time.
About our courses listed in this catalog: The courses in this catalog are described in their originally designed length and content. As a service to our customers, these courses can be delivered in shorter time frames. Please contact our In-house Sales Department for more information about our effective, efficient and cost justfied programs by clicking on the following link In-House Programs or click on the following link Contact Us to go to our company’s directory.
Click on the course you wish to consider.
Introductory through Intermediate Audit Seminar s
Audit Banking Seminars
The course outlines listed below are designed to comply with the various professional certifying organizations’ documentation requirements. For example, professionals with CIA, CISA, CISM, and CISSP certifications will find that the course content, suggested CPE, attendance record retention, workbook organization and certificate of completion comply with the requirements of these organizations. Students should review content information to ensure application to their certification.
Advanced IT Audit and IT Professional Se minars
Operating Systems and database Security Audit Seminars
Network Security Audit Seminars
Computer Forensic Auditing
© 1997-2007 by Audit Re-Engineering and Training Institute, Inc.
IA01 - Introduction to Information Systems Auditing
(4 day Format)
CPE Hours: 32
Delivery Method: Lecture, Class Participation
Skills Level: Basic
Prerequisite: 1 year experience in Auditing
Suggested Field of Study: Auditing
Who Should Attend: Financial/Operational Auditors, Accountants and New IS Auditors
Course Description: This four day course addresses all the key areas of Information Systems auditing a new auditor to this field will require. The participant will be exposed to a significant level of detail in this full version course. The course carefully directs the participants to first assess why it is important to understand and maybe move into this field. The participants will be provided with functional roles and responsibilities for Information Systems auditors that are actually perceived by management as the role this group has been charged with. The new IS or IT auditor will be exposed to the most current laws that impact this profession. For example a summary review of the Sarbanes Oxley Act or SOX. This review ensure the new IS/IT auditor familiarity with the newest requirements in the industry.
After this initial introduction, the participants move on to the more technical side of the profession. The participants are first provided with the description of legacy systems their functionality even today and comparing these old and trusted system with the newest kids on the block; the client/server or distributed processing environments. These chapters are furthered enhanced by today’s modern communication systems. These connecting points or Networks as they are commonly known, provide the back bone of every modern organization today. So the new IS/IT auditor has to become familiar with this environment. This is followed by disclosing how companies developed trusted environments so proper mitigation of risk takes place.
At this point in the course, the participants will know that the IS/IT areas are labeled as high risk because of your organization’s reliance on its availability and services. So failure to operate in a controlled manner or simply operate at all could result in significant losses. The participants are, therefore, thoroughly thrust into understanding about General Controls and their impact on the business internal control mechanisms. Further, a sampling of the most significant areas of the Information Technology Division is performed. This review provides significantly understanding on how all of this works.
The last four chapters deal with understanding the many uses of automation to perform IS/IT audits, the changing auditing environment requiring all auditors to stay current or be lost in the rapidly moving technology, the planning process required for an IS/IT audit that includes the use of non technical auditors using an integrated approach, and finally a phased approach to performing IS/IT audits is described as a sample of how these audits are coordinated and executed.
Click here to return to the first page
© 1997-2007 by Audit Re-Engineering and Training Institute, Inc.
IA02 - Auditing and Assessing Projects Under Development
(4 day Format)
CPE Hours: 32
Delivery Method: Lecture, Class Participation
Skills Level: Basic/Intermediate
Prerequisite: 2 years experience in Auditing
Suggested Field of Study: Auditing
Who Should Attend: Financial/operational Auditors and IS Auditors
Course Description:
In this four day course the participants will be provided with a thorough review of the system development process, its basic management structure, project organizational mechanism, and an actual real-world case study to show you how to audit each of the development phases.
In the first segment, the course material will set the stage for the eventual audit process by explaining in detail the following areas of information: Management and Audit Roles and Responsibilities, understanding what a project is and what are the requirements and pitfalls to avoid in project management, issues to consider when your organization decides to outsource project management, Work Breakdown Structures and how it works, and pre-audit information that helps the auditor to understand from the first steps in auditing your system development project to understanding prototyping/iterative development strategies.
In the next segment, the participants will evaluate each of the six modern phases used in today’s development projects. Each chapter begins with the objectives for that phase, what needs to be done by the auditor to ensure compliance to objectives, and an audit program specifically designed for each phase. After reviewing the audit program, the participants will be asked to organize themselves into groups and evaluate each case study for the corresponding phases presented in the course. Each group will be ask to assess each of the issues noted using the audit programs provided after each chapter and information obtained from the author’s presentation. At the last phase, the groups will be asked to provide an overall rating/opinion using a numerical assessment evaluation system.
In addition to the lecture and detailed case studies, the workbooks provided will also include a bibliography of reference materials, sample client/server, Internet and other technical terminology used today, and a sample risk model which contains unique categories for examining pertinent aspects of each project. This risk model can assist you in selecting the most appropriate project to audit.
Click here to return to the first page
© 1997-2007 by Audit Re-Engineering and Training Institute, Inc.
IA03 - Project Management Audit Concepts and Organization
(4 day format)
CPE Hourss: 32
Delivery Method: Lecture, Class Participation
Skills Level: Intermediate Prerequisite Responsibilities in this area
Prerequisite: 2 years experience in Auditing
Suggested Field of Study: Auditing
Who Should Attend: Auditing personnel, project managers and members of management
Course Description:
In this four day course the participants will learn from the basic fundamentals of what constitutes a project to the advanced methods of today’s project management; such as the Virtual Project Management process.
The seminar will be divided into three logical segments that will allow auditors to complete their examination.
In the first segment we prepare the auditor will provided with definitions and structure of a project. This will be enhanced by delving into the process itself and how it should operate. Next, we will look at how project management, as a discipline was applied then, how it is applied today in light of SOX compliance issues.
In the second segment we will examine more advance topics. We will compare the Request for Funding Process and the Proof of Concept to determine how management evaluates which one will best work for the organization. We then examine the value and need for a corporate wide System Development Methodology from a risk and control perspective and also from a compliance perspective (both corporate and regulatory issues).
And, in the last segment, we will look at some of the project management tools available to your audit client. This section will provide the auditor with insights into the mechanisms that should be used and whether they are being used as required by management. Other topics discussed will be the criteria developed by management to search for or acquire the services of a Project Manager. Because this person is so critical in the successful completion of a project, management’s selection process becomes an integral part of the project and in the audit engagement.
Because of the high investment and high expectations from each project, we will examine in detail who is responsible for what. With the modern concepts and practices of today, everyone has a specific role in product development. Therefore, we will discuss roles and responsibilities of System Owners, Information Technology group, Senior Management and Internal Audit.
We end our segment and the course by discussing risks associated with outsourcing project management, and the hot new concept of a Virtual Project Management Office.
As a bonus to our participants, we will also include a bibliography of additional resources, and a glossary of project management terms.
Click here to return to the first page
© 1997-2007 by Audit Re-Engineering and Training Institute, Inc.
IA04 - Managing an Audit Department for the 21st Century
(2 day format)
CPE Hours: 16
Delivery Method: Lecture and Class Participation
Suggested Field of Study: Specialized Knowledge and Application
Skills Level: Intermediate
Prerequisites: 3 to 5 years Audit Experience
Who Should Attend: Audit Seniors, Supervisors and Managers
Course Description: In this 2-day course the participants will learn about the key components of managing in today’s highly automated and changing roles for auditors. The course effectively targets the building blocks on good supervision and management. Specifically, methods and practices regarding how employees can be a significant contributor, how they can become stronger in managing their projects, and ensuring their communication skills are asset and not a liability. Special sections such as the improvement of management skills and how to manage ethical behavior is discussed. The remaining sections discuss key components for implementing rotational leadership, adding value to all work performed (or as least have management acknowledge that you are adding value), how to best influence your auditees (customers) and a conceptual design overview of the reengineering process in a implement able matrix format.
Click here to return to the first page
© 1997-2007 by Audit Re-Engineering and Training Institute, Inc.
IA05 - Auditing Fraud “101
(1 day format)
Suggested CPE Hours: 8
Skills Level: Basic/Intermediate
Delivery Method: Lecture, Class Participation
Suggested Field of Study: Auditing
Prerequisite: Understand Internal and General Controls, Applicable Crime Laws (not mandatory but helpful), some working knowledge of COSO, COBIT, Governmental rules and regulations (if applicable)
Who Should Attend: Financial/Operational Auditors, Single Audit Auditors, Accountants, Treasurers, New Information Technology Auditors, Management, those charged with responsibilities in this area.
Learning Objectives: Participants will learn about the genesis of a fraud in today’s environment, its detection and solutions for correcting, and mitigating risk of further abuse.
Course Description: As a result of this course’s unique design and expert delivery, the participants are immersed into what really is important by addressing the key areas of fraud in today’s modern operations.To this end, the course quickly and efficiently addresses the genesis of a fraud, its markers or indicators, responsibilities for this crime and the solution to mitigate risk; so that this crime does not occur again. The course contains the following topics:
|
Today’s Most Common Fraud Activities and Why
- Technology Hit Parade
- Cyber Crimes
- Physical and Logical Access
- Portable Mini and Micro Drives
- Wireless
- The Human Factor
- Societal Crimes
- Private Sector Crimes
|
Responsibilities for Detecting Fraud
- Management
- Audit (External third party, Internal/Inspectors)
- Employees
|
|
Structures that Promote Fraud
- Management or the lack of it
- Integrity of Operational and Technical Designs
|
Topical Issues Dealing with Fraud or the Appearance of Fraud
- Elections...the paperless environment
- Identity Theft...Public Records
- Virtual Office
- Employee Exit process
|
|
Key Elements
- Indicators/Detectors (are they present?)
- Actuators (the engine that makes it possible)
|
Fraud Prevention/Solutions
- Performing Risk Assessments
- IT Systems
- Auditors
|
|
Click here to return to the first page
© 1997-2007 by Audit Re-Engineering and Training Institute, Inc.
IA06 - Auditing Contingency Planning and Disaster Recovery Process
(4 day format)
CPE Hours: 32
Delivery Method: Lecture, Class Participation
Suggested Field of Study: Auditing
Skills Level: Basic/Intermediate
Prerequisites: A minimum of 2 years audit experience and/or active involvement in the Contingency and Disaster Recovery process
Who Should Attend: Professionals responsible for either performing audits in this area and/or professionals involved in the design and implementation of the organization’s Contingency and Disaster Recovery process. Specifically:
- IS/IT auditors
- Financial auditors
- Operational auditors
- Accountants
- IS/IT audit managers
- IS/IT security/control professionals
Course Description: In this four day course, the participants will be provided with a comprehensive understanding of the current Contingency Planning and Disaster Recovery issues. The material covers ALL the components of the Contingency Planning and Disaster Recovery process that are crucial in today’s business activities. The information provided associates the risk of the ongoing technology evolution to the contents of the Contingency Plan and associated Disaster Recovery Testing. The participants will be provided with ideas on how to audit each of the key areas in the Plan and the Disaster Recovery Test. Along with the information provided by area, a real world case study has been inserted in each of the areas of the plan and disaster recovery test to ensure comprehension.
This course significantly improves or adds to your understanding of this very important process. Any organization that is either required to have a contingency plan or wants to do it because it is good business, needs to have its people attend this course.
Click here to return to the first page
© 1997-2007 by Audit Re-Engineering and Training Institute, Inc.
IA07 - Information Systems Auditing - Intermediate Level
(4 day format)
CPE Hours: 32
Delivery Method: Lecture, Class Participation
Skills Level: Intermediate intended for attendees with a basic understanding of IT audit and 2 to 3 years operational, financial, and/or performance auditing experience.
Prerequisite: See note below
Suggested Field of Study: Auditing
Who Should Attend: All auditors meeting the suggested prerequisite experience level and background.
Course Description: This four day course is designed as a continuation of the Fundamentals or Introduction to Information Systems Auditing course. This course assumes an understanding of certain terminology, and control practices as described in such control framework structures as COBIT and COSO. The participants will be provided with methods and practices to assist them in performing comprehensive audits of significant areas of the Information Systems Department (ISD). While all areas of the ISD are important, the areas chosen for this course represent significant risk in today’s networked, and decentralized processing environment. Included in the course is a chapter totally dedicated to the Sarbanes Oxley Act (SOX) and other issues related to AICPA’s SAS99 and the SEC’s PCAOB. There are also exercises by specific audit area to ensure participants understand the concepts and methodology discussed in the seminar. And, several appendix sections are included with the work book which provide participants with an understanding of technical terms, references related to the subject matter found on the Internet that can be of use for further studies; and audit programs of a few key areas to assist participants in their audit.
Sample of the topics covered in this timely and insightful course:
- Internet Operations
- Sox, SAS 99 and SEC’s PCAOB
- Network Environments
- Firewall Rules
- Application Auditing
- Change Management/Quality Assurance
- Data Security Administration
- Programming Department.
- Data Center Operations
- Tape/media librarian functions
- Physical Security
- Decentralized Processing Centers
- Hot Site Testing
- Integrated Auditing
Prerequisite: Minimum of two to three years of audit experience and the participant should have taken a Fundamentals or Introduction to Information Systems Auditing course no more than one year of taking this course. We also recommend the participant have some hands on experience in performing limited Information Systems Auditing. This experience criteria is important but not mandatory to participate and to understand the concepts discussed in this course.
Special Note: This course is not targeted for veteran IT auditors or IT auditors with more than 4 or 5 years experience in IT Auditing. While these auditors are welcome to attend the course as a refresher, their expectations should not include learning something to which they have never been exposed to. While we believe this is a good course for IT professionals, the course does assume the following fundamental concepts from a previous audit introduction course like an Introduction to IS Auditing or a related Fundamentals Cobit course:
- Work paper creation
- Auditing interviewing skills
- Auditing standards which meet both legal and professional criteria
- Assessing and understanding controls and how they impact risk
- Audit behavior and ethics
- And, audit operational skills.
While the course explores areas that IT professionals are already familiar with, the material is presented only from an auditing perspective - not a technical view point.
Click here to return to the first page
© 1997-2007 by Audit Re-Engineering and Training Institute, Inc.
IA08 - Auditing Data Integrity in Application Systems
(2 day format)
CPE Hours: 16 hours
Delivery Method: Lecture, Class Participation
Skills Level: Basic to Intermediate
Prerequisite: Familiar with Controls and their impact on financial statements
Field of Study: Auditing
Who Should Attend: Financial/Operational Auditors, and New IS Auditors. Experienced IS auditors are welcomed to attend the course as a refresher and possibly to learn a new way of performing application audits.
Learning Objectives: The students will be able to not only understand how to perform an effective application review but actually be provided with methods and practices for performing one as soon as they return to their respective organizations.
Overview of Course Content: This two-day course provides the participants with a real world innovative way of performing application reviews. The participants will learn about “scoping” the review, assessing roles and responsibilities, determining the impact of financial statement integrity through the evaluation of internal, general and application controls, and evaluating the different application systems and their expected control environment. Once these concepts are understood, the course will actually walk the participants through every step of the audit process; from planning to reporting.
Course Content:
The course contains the following topics:
- Application Systems Audit Scope
- Relating Internal, General and Application Systems Functionality Control to Financial Statement Reliability
- Various Application Platforms and their expected controls
- Phase 1: Audit Planning
- Phase 2: Audit Research
- Phase 3: Audit Testing
- Phase 4: Audit Testing Processed Data
- Phase 5: Consolidated Audit Report
- Appendix section
Click here to return to the first page
© 1997-2007 by Audit Re-Engineering and Training Institute, Inc.
IA09-Improving Management and Employee Performance
(1 Day Format
CPE Hours: 8
Delivery Method: Lecture, Class Participation
Suggested Field of Study: Business Management and Organization
Skill Level: Basic to Advance
Prerequisite No preexisting requirements
Who Should Attend: All are invited
Course Description: This one day seminar focuses on developing today’s employees and management personnel to effectively build cost effective communication and organizational skills. This includes:
- How to build and maintain an effective and productive team
- Establishing a baseline of understanding
- Mastering effective communication skills
- Acquiring Time Management skills
- Becoming a successful and effective performer
- and Developing form management
Click here to return to the first page
© 1997-2007 by Audit Re-Engineering and Training Institute, Inc.
IA10 - Fundamentals of Information Systems for Audit Managers
(2 day format)
CPE Hours: 16
Delivery Method: Lecture, Class Participation
Suggested Field of Study: Auditing
Skill Level: Introductory to Intermediate Level
Prerequisite: 3 to 5 years audit experience.
Who Should Attend: New and existing audit managers, supervisors and seniors moving into management positions.
Course Description: This two day course starts by addressing issues relating to management expectations and works through describing roles and responsibilities for information systems, also illustrating security breaches in the past and today. Specific attention or emphasis is placed on managing this technical environment and also addressing issues such as audit’s role as consultants in dealing with SOX requirements. Throughout the remaining portions of the course, the attendees are treated to selected key components of the Information Systems area that are pertinent to examination. Key issues and areas detailed include:
- Identifying today’s complex systems
- How organizations today create trusted environments
- Assessment of General and Internal controls
- Components of an Information Systems Audit
- Internal Auditors as Consultants and relationship to SOX requirements
- Components of planning and executing today’s Information Systems Audits
- And, performing the audit in a simple but effective phased approach
Click here to return to the first page
© 1997-2007 by Audit Re-Engineering and Training Institute, Inc.
AB01- Auditing Internet Banking (4 1/2 day format)
CPE Hours: 36
Delivery Method: Lecture, Class Participation
Suggested Field of Study: Auditing
Skill Level: Intermediate Level and higher
Prerequisite It is recommended that the participants should have already taken the Introduction to Information Systems Auditing or equivalent, that they are familiar with some aspects of their regulatory environment, and are eager to move up to the front of their careers and shine.
Who Should Attend: Financial, Compliance, Operational Auditors; also, Audit Management and User Management responsible for Internet Banking.
Course Description: This four day course offers the participant with comprehensive detailed insights into auditing the highly visible and risky Internet Banking process. The material associates issues addressed by United States Banking regulators such as the OCC (using the FFIEC procedures) and Federal Reserve (using their Electronic Banking procedures). This course provides the participants with the information needed to skillfully dissect the key areas of auditing Internet Banking products/services, and associating it to regulatory requirements. A special chapter is included to address the compliance issues with the Graham Leach Bliley Act (GLB). Other areas included for discussion and evaluation are Intrusion Detection, Virus Management, Outsourcing Internet Banking, Cash Management through the Internet and Security are among the topics covered. Also, included in the work books are technology terms and sample audit steps to supplement the detailed material offered.
Click here to return to the first page
© 1997-2007 by Audit Re-Engineering and Training Institute, Inc.
|