Risk-Based IT Audit untuk Industri Perbankan

Risk-Based IT Audit untuk Industri Perbankan

Risk-Based IT Audit untuk Industri Perbankan

26 - 27 August 2026 Surabaya Hotel Santika Pandegiling

Deskripsi

Pelatihan Risk-Based IT Audit untuk Industri Perbankan dirancang untuk membekali peserta dengan kemampuan teknis dalam melakukan audit teknologi informasi berdasarkan tingkat risiko dan dampaknya terhadap operasional serta bisnis bank. Peserta akan mempelajari bagaimana melakukan IT risk assessment, menentukan audit scope dan objective, menyusun audit program, melakukan pengujian terhadap IT General Controls (ITGC), application controls, access management, change management, backup, disaster recovery, serta keamanan informasi.

Pelatihan menggunakan pendekatan hands-on dan audit case based, mulai dari penyusunan risk-control matrix, audit planning, walkthrough, control testing, evidence gathering, identification of audit findings, hingga penyusunan rekomendasi. Peserta juga akan diperkenalkan pada area IT yang semakin penting bagi perbankan seperti cloud computing, cybersecurity, third-party technology risk, data protection, digital banking, dan technology resilience, sehingga mampu menghasilkan audit findings yang relevan dengan risiko teknologi aktual bank.

Tujuan

  • Memahami konsep Risk-Based IT Audit.
  • Mengidentifikasi IT risk yang relevan bagi industri perbankan.
  • Melakukan IT risk assessment.
  • Menyusun IT audit universe dan audit plan.
  • Menyusun Risk Control Matrix (RCM).
  • Melakukan audit IT General Controls.
  • Melakukan pengujian application controls.
  • Melakukan audit access management dan change management.

Materi

IT Risk Assessment & IT General Controls

  • IT Audit Framework dalam Industri Perbankan
  • Konsep Risk-Based IT Audit
  • IT Risk Identification & Assessment
  • IT Audit Universe & Risk Prioritization
  • Audit Objective, Scope & Criteria
  • Penyusunan IT Risk Control Matrix
  • IT General Controls (ITGC)
  • User Access Management
  • Privileged Access & Segregation of Duties
  • Change Management Controls
  • IT Operations & Job Scheduling
  • Backup & Recovery Controls
  • IT Asset & Configuration Management
  • Audit Evidence & Control Testing
  • Case Study: ITGC Audit

Application, Cybersecurity & Technology Audit

  • Application Controls & Application Audit
  • Input, Processing & Output Controls
  • Interface & Data Integrity Controls
  • Database & Data Access Controls
  • Cybersecurity Risk Assessment
  • Security Monitoring & Incident Management
  • Vulnerability & Patch Management
  • Digital Banking & Technology Risk
  • Cloud Computing & Cloud Security Audit
  • Third-Party/Vendor Technology Risk
  • Data Protection & Privacy Controls
  • Business Continuity & Disaster Recovery Audit
  • IT Audit Finding & Root Cause Analysis

Peserta

  • IT Audit
  • Internal Audit
  • IT Risk Management
  • Information Technology (IT)
  • Compliance / Kepatuhan

Metode

  • Pre-test
  • Presentasi Materi
  • Diskusi
  • Studi Kasus
  • Post-test

Fasilitas

  • Training Amenities
  • Peralatan Pelatihan (Tas, Hand Out, Block Note, Pulpen, Watermark)
  • Sertifikat 
  • Souvenir
  • 2x Coffee Break, 1x Lunch
Kembali ke Layanan