Audit Booklet

Federal Financial Institutions Examination CouncilFFIECAUD AuditAUGUST 2003IT EXAMINATIONHANDBOOK TABLE OF CONTENTSINTRODUCTION................................................................................ 1 IT AUDIT ROLES AND RESPONSIBILITIES.................................... 3 Board of Directors and Senior Management.........................................................3 Audit Management................................................................................................5 Internal IT Audit Staff ............................................................................................6 Operating Management ........................................................................................6 External Auditors...................................................................................................6 INDEPENDENCE AND STAFFING OF INTERNAL IT AUDIT.......... 8 Independence .......................................................................................................8 Staffing..................................................................................................................9 INTERNAL AUDIT PROGRAM........................................................ 11 RISK ASSESSMENT AND RISK-BASED AUDITING..................... 15 Program Elements ..............................................................................................15 Risk Scoring System.................................................. ...