Training & Konsultasi
INFO TRAINING INFORMATION SYSTEM AUDIT 2026-2027
INFO TRAINING INFORMATION SYSTEM AUDIT 2026-2027
DESKRIPSI
Training Information System Audit 2026–2027 merupakan program pelatihan komprehensif yang dirancang untuk meningkatkan kompetensi peserta dalam melakukan audit terhadap sistem informasi, teknologi informasi, infrastruktur IT, aplikasi, data, keamanan informasi, serta proses dan pengendalian teknologi dalam organisasi.
Di era digital, sistem informasi menjadi bagian penting dalam mendukung operasional, pengambilan keputusan, pelayanan pelanggan, pengelolaan data, serta pencapaian tujuan bisnis. Ketergantungan tersebut juga meningkatkan berbagai risiko seperti cybersecurity risk, data breach, unauthorized access, system failure, data integrity issues, IT governance weaknesses, inadequate controls, business continuity risk, dan compliance risk. Oleh karena itu, organisasi membutuhkan proses audit sistem informasi yang terstruktur untuk memastikan bahwa teknologi dan sistem informasi berjalan secara efektif, aman, andal, efisien, dan sesuai dengan kebijakan serta kebutuhan bisnis.
Training ini membahas konsep dan praktik Information System Audit secara menyeluruh, mulai dari audit planning, risk assessment, understanding business process, IT governance, IT general controls, application controls, access controls, change management, backup and recovery, network security, database controls, cybersecurity controls, data integrity, logging and monitoring, vendor management, hingga business continuity dan disaster recovery.
Peserta juga akan mempelajari tahapan audit mulai dari audit engagement, audit scope, audit objective, risk-based audit planning, audit program, evidence collection, interview, observation, walkthrough, sampling, testing, control evaluation, finding development, root cause analysis, risk rating, audit reporting, recommendation, management response, hingga follow-up.
Training memberikan pemahaman mengenai berbagai area pengendalian seperti IT Governance, IT General Controls (ITGC), Application Controls, Logical Access Controls, Physical Security, Change Management, IT Operations, Backup, Recovery, Incident Management, Configuration Management, Data Management, Database Security, Network Security, Endpoint Security, Cloud Computing, Third-Party Risk, dan Business Continuity.
Selain itu, peserta diperkenalkan dengan kerangka kerja dan praktik audit yang relevan, termasuk konsep risk-based auditing, internal control, COBIT, ISO/IEC 27001 awareness, COSO, audit evidence, control testing, dan audit documentation. Penggunaan framework disesuaikan dengan kebutuhan organisasi dan ruang lingkup audit.
Melalui pendekatan pembelajaran berbasis teori, diskusi, studi kasus, audit simulation, control assessment, audit working paper, dan penyusunan audit report, peserta diharapkan mampu melakukan audit sistem informasi secara lebih sistematis, objektif, berbasis risiko, dan menghasilkan rekomendasi yang memberikan nilai tambah bagi organisasi.
Tujuan TRAINING INFORMATION SYSTEM AUDIT 2026-2027
- Memahami konsep Information System Audit.
- Memahami tujuan dan manfaat audit sistem informasi.
- Memahami peran auditor dalam lingkungan teknologi informasi.
- Memahami IT governance.
- Memahami IT risk management.
- Memahami konsep internal control.
- Memahami risk-based auditing.
- Menentukan audit objective.
- Menentukan audit scope.
- Menyusun audit plan.
- Menyusun audit program.
- Melakukan preliminary assessment.
- Memahami business process dan information system.
- Mengidentifikasi IT risks.
- Mengidentifikasi control objectives.
- Mengevaluasi internal controls.
- Mengidentifikasi control weaknesses.
- Melakukan control testing.
- Mengumpulkan audit evidence.
- Melakukan interview dan observation.
- Melakukan walkthrough.
- Memahami audit sampling.
- Mengevaluasi IT General Controls.
- Mengevaluasi Application Controls.
- Mengevaluasi access controls.
- Mengevaluasi change management controls.
- Mengevaluasi IT operations controls.
- Mengevaluasi backup dan recovery controls.
- Mengevaluasi database controls.
- Mengevaluasi network security controls.
- Mengevaluasi cybersecurity controls.
- Mengevaluasi data integrity.
- Mengevaluasi logging dan monitoring.
- Mengevaluasi third-party IT risk.
- Memahami cloud computing audit awareness.
- Memahami business continuity dan disaster recovery audit.
- Menyusun audit findings.
- Melakukan root cause analysis.
- Menentukan risk rating.
- Menyusun audit recommendations.
- Menyusun audit working papers.
- Menyusun audit report.
- Melakukan audit follow-up.
- Meningkatkan kualitas audit evidence.
- Mengembangkan audit improvement program
Materi TRAINING INFORMATION SYSTEM AUDIT 2026-2027
MODUL 1 — FUNDAMENTAL INFORMATION SYSTEM AUDIT
- Pengertian Information System Audit
- Tujuan audit sistem informasi
- Fungsi audit sistem informasi
- Manfaat IS Audit
- Peran Information System Auditor
- IT audit vs financial audit
- IT audit vs operational audit
- IT assurance
- Audit universe
- Audit objective
- Audit scope
- Audit criteria
- Audit evidence
- Audit conclusion
- Audit recommendation
MODUL 2 — INFORMATION SYSTEM & IT ENVIRONMENT
- Information system fundamentals
- IT infrastructure
- Hardware
- Software
- Network
- Database
- Application
- Cloud services
- Data
- Users
- IT operations
- Information flow
- System architecture
- Technology dependencies
- Business dependency terhadap IT
MODUL 3 — IT GOVERNANCE
- Pengertian IT Governance
- IT governance principles
- IT-business alignment
- IT strategic planning
- IT policies
- IT procedures
- IT organization
- Roles and responsibilities
- Accountability
- Decision rights
- IT performance management
- IT risk governance
- IT compliance
- IT governance assessment
MODUL 4 — RISK-BASED INFORMATION SYSTEM AUDIT
- Risk-based audit
- IT risk identification
- IT risk assessment
- Risk likelihood
- Risk impact
- Inherent risk
- Residual risk
- Control risk
- Risk prioritization
- Risk matrix
- Risk treatment
- Risk-based audit planning
- Audit priority
MODUL 5 — AUDIT PLANNING
- Audit planning
- Audit universe
- Audit engagement
- Audit objective
- Audit scope
- Audit criteria
- Audit methodology
- Audit timeline
- Audit resources
- Audit team
- Audit procedures
- Audit program
- Audit communication
- Audit planning documentation
MODUL 6 — AUDIT PROCESS
- Audit lifecycle
- Preliminary review
- Risk assessment
- Control assessment
- Evidence collection
- Fieldwork
- Testing
- Finding development
- Audit conclusion
- Reporting
- Management response
- Follow-up
- Audit closure
MODUL 7 — INTERNAL CONTROL & IT CONTROL
- Konsep internal control
- Control objectives
- Preventive controls
- Detective controls
- Corrective controls
- Manual controls
- Automated controls
- IT-dependent controls
- Control design
- Control implementation
- Control effectiveness
- Control deficiency
- Control weakness
- Compensating controls
MODUL 8 — IT GENERAL CONTROLS (ITGC)
- Pengertian ITGC
- IT organizational controls
- IT policies
- IT operations
- Access management
- Change management
- Backup and recovery
- Incident management
- Problem management
- Configuration management
- IT asset management
- System development controls
- Vendor management
- ITGC assessment
MODUL 9 — APPLICATION CONTROLS
- Application controls
- Input controls
- Processing controls
- Output controls
- Interface controls
- Validation controls
- Completeness controls
- Accuracy controls
- Authorization controls
- Exception handling
- Automated controls
- Application configuration
- Application control testing
MODUL 10 — ACCESS CONTROL AUDIT
- Logical access controls
- User account management
- User provisioning
- User deprovisioning
- Access authorization
- Password management
- Privileged access
- Administrative access
- Role-based access
- Segregation of duties
- Periodic access review
- Dormant accounts
- Access violation
- Access control testing
MODUL 11 — IDENTITY & ACCESS MANAGEMENT
- Identity management
- Authentication
- Authorization
- Single Sign-On awareness
- Multi-Factor Authentication awareness
- Privileged Identity Management awareness
- User lifecycle
- Joiner-Mover-Leaver process
- Access recertification
- Role management
- Identity governance
- IAM audit considerations
MODUL 12 — CHANGE MANAGEMENT AUDIT
- Change management fundamentals
- Change request
- Change approval
- Change assessment
- Testing
- User Acceptance Testing awareness
- Segregation of duties
- Emergency change
- Change implementation
- Change documentation
- Version control
- Rollback
- Change monitoring
- Change management audit
MODUL 13 — IT OPERATIONS AUDIT
- IT operations
- Job scheduling
- Batch processing
- System monitoring
- Incident management
- Problem management
- IT service management
- Capacity management
- Performance monitoring
- Availability management
- Operational procedures
- IT operations documentation
- Operations control testing
MODUL 14 — BACKUP & RECOVERY AUDIT
- Backup policy
- Backup strategy
- Backup schedule
- Backup monitoring
- Backup verification
- Restore testing
- Recovery procedures
- Recovery Point Objective
- Recovery Time Objective
- Backup media
- Offsite backup
- Backup security
- Backup audit evidence
- Recovery control assessment
MODUL 15 — BUSINESS CONTINUITY & DISASTER RECOVERY
- Business Continuity Management
- Business Impact Analysis
- Critical business processes
- IT dependency
- Disaster Recovery Planning
- Recovery strategy
- Recovery site
- Recovery procedures
- DR testing
- DR exercise
- Crisis management
- Recovery objectives
- Business continuity controls
- DR audit
MODUL 16 — CYBERSECURITY AUDIT
- Cybersecurity fundamentals
- Cybersecurity governance
- Security policies
- Threat awareness
- Vulnerability awareness
- Security controls
- Endpoint security
- Network security
- Application security
- Identity security
- Data security
- Security monitoring
- Security incident management
- Cybersecurity audit considerations
MODUL 17 — NETWORK SECURITY AUDIT
- Network architecture
- Network segmentation
- Firewall
- Router
- Switch
- VPN
- Remote access
- Wireless network
- Network monitoring
- Network configuration
- Firewall rules
- Network access control
- Network logging
- Network security testing
MODUL 18 — DATABASE AUDIT
- Database fundamentals
- Database architecture
- Database access
- Database user management
- Database privileges
- Database security
- Database configuration
- Data integrity
- Data completeness
- Data accuracy
- Database backup
- Database recovery
- Database logging
- Database audit procedures
MODUL 19 — DATA GOVERNANCE & DATA INTEGRITY
- Data governance
- Data ownership
- Data classification
- Data quality
- Data integrity
- Data completeness
- Data accuracy
- Data consistency
- Data availability
- Data retention
- Data lifecycle
- Master data
- Data access
- Data governance audit
MODUL 20 — LOGGING & MONITORING
- Logging fundamentals
- Audit trail
- System logs
- Application logs
- Security logs
- User activity logs
- Privileged activity
- Log retention
- Log monitoring
- Security event monitoring
- Alert management
- Exception monitoring
- Log review procedures
- Audit evidence from logs
MODUL 21 — INFORMATION SECURITY AUDIT
- Information security governance
- Security policy
- Security standards
- Asset management
- Access control
- Cryptography awareness
- Physical security
- Operations security
- Communications security
- Incident management
- Business continuity
- Supplier security
- Information security compliance
MODUL 22 — ISO/IEC 27001 AUDIT AWARENESS
- Introduction to ISO/IEC 27001
- Information Security Management System
- ISMS
- Risk assessment
- Risk treatment
- Statement of Applicability awareness
- Security controls
- Information security policy
- Internal audit
- Corrective action
- Continual improvement
- Audit evidence
- ISO/IEC 27001 audit considerations
MODUL 23 — COBIT AWARENESS
- Introduction to COBIT
- COBIT principles
- Governance system
- Governance objectives
- Management objectives
- IT governance
- IT management
- Performance measurement
- Risk optimization
- Resource optimization
- Stakeholder value
- COBIT-based audit awareness
MODUL 24 — COSO & INTERNAL CONTROL AWARENESS
- Introduction to COSO
- Control environment
- Risk assessment
- Control activities
- Information and communication
- Monitoring activities
- Internal control framework
- IT-related controls
- Control evaluation
- Control deficiencies
- Internal control reporting
MODUL 25 — CLOUD COMPUTING AUDIT
- Cloud computing fundamentals
- SaaS
- PaaS
- IaaS
- Cloud service provider
- Shared responsibility awareness
- Cloud access control
- Cloud security
- Data protection
- Availability
- Backup
- Disaster recovery
- Cloud vendor risk
- Cloud audit considerations
MODUL 26 — THIRD-PARTY & VENDOR IT AUDIT
- Third-party risk
- Vendor risk management
- IT outsourcing
- Cloud vendor
- Service provider
- Vendor selection
- Due diligence
- Contract requirements
- SLA
- Security requirements
- Performance monitoring
- Vendor audit
- Third-party assurance
- Vendor risk assessment
MODUL 27 — SYSTEM DEVELOPMENT & SDLC AUDIT
- System Development Life Cycle
- Requirement analysis
- System design
- Development
- Testing
- Deployment
- Maintenance
- User acceptance
- Change control
- Version management
- Development environment
- Test environment
- Production environment
- Segregation of environments
- SDLC audit
MODUL 28 — IT ASSET MANAGEMENT AUDIT
- IT asset management
- Hardware inventory
- Software inventory
- License management
- Asset ownership
- Asset classification
- Asset lifecycle
- Asset disposal
- Configuration management
- Asset security
- Unauthorized assets
- IT asset audit
MODUL 29 — PRIVACY & DATA PROTECTION AWARENESS
- Data privacy fundamentals
- Personal data
- Sensitive information
- Data processing
- Data access
- Data retention
- Data transfer
- Data protection controls
- Privacy risk
- Privacy governance
- Privacy incident
- Regulatory awareness
- Privacy audit considerations
MODUL 30 — AUDIT EVIDENCE & AUDIT TECHNIQUES
- Audit evidence
- Sufficient evidence
- Appropriate evidence
- Evidence reliability
- Documentation
- Interview
- Observation
- Inspection
- Inquiry
- Reperformance
- Analytical procedures
- Walkthrough
- Evidence validation
- Evidence retention
MODUL 31 — AUDIT SAMPLING & TESTING
- Audit sampling
- Sampling objectives
- Population
- Sample selection
- Random sampling
- Judgmental sampling
- Attribute testing
- Control testing
- Substantive testing awareness
- Test procedures
- Test results
- Exception identification
- Sample documentation
MODUL 32 — AUDIT WORKING PAPERS
- Audit working papers
- Working paper objectives
- Audit documentation
- Audit evidence reference
- Test documentation
- Finding documentation
- Review notes
- Cross-referencing
- Audit trail
- Working paper quality
- Confidentiality
- Working paper retention
MODUL 33 — AUDIT FINDINGS & ROOT CAUSE ANALYSIS
- Audit findings
- Condition
- Criteria
- Cause
- Effect
- Risk
- Root Cause Analysis
- 5 Why
- Fishbone Analysis
- Control weakness
- Impact assessment
- Risk rating
- Finding prioritization
MODUL 34 — AUDIT REPORTING
- Audit report structure
- Executive summary
- Audit objective
- Audit scope
- Audit methodology
- Audit findings
- Risk rating
- Root cause
- Impact
- Recommendation
- Management response
- Action plan
- Target completion
- Audit conclusion
MODUL 35 — AUDIT FOLLOW-UP
- Audit follow-up
- Corrective action
- Remediation
- Management action plan
- Action owner
- Target date
- Evidence of remediation
- Validation
- Finding closure
- Overdue action
- Residual risk
- Follow-up reporting
MODUL 36 — INFORMATION SYSTEM AUDIT CASE STUDY
Studi kasus terintegrasi meliputi:
- Menentukan audit scope
- Menentukan audit objective
- Identifikasi IT risks
- Membuat risk assessment
- Menentukan control objectives
- Menyusun audit program
- Melakukan walkthrough
- Mengumpulkan audit evidence
- Melakukan control testing
- Mengevaluasi ITGC
- Mengevaluasi application controls
- Mengevaluasi access controls
- Mengevaluasi change management
- Mengevaluasi backup and recovery
- Mengevaluasi cybersecurity controls
- Mengidentifikasi control weaknesses
- Menyusun audit findings
- Melakukan root cause analysis
- Menentukan risk rating
- Menyusun recommendations
- Membuat audit report
- Menyusun management action plan
- Melakukan audit follow-up
MODUL 37 — PRACTICAL INFORMATION SYSTEM AUDIT WORKSHOP
Peserta akan melakukan latihan:
- Membuat audit universe
- Membuat risk assessment
- Menentukan audit scope
- Menentukan audit objective
- Membuat audit program
- Membuat control matrix
- Membuat audit checklist
- Melakukan interview simulation
- Melakukan walkthrough
- Mengumpulkan audit evidence
- Melakukan control testing
- Membuat audit working paper
- Mengidentifikasi audit finding
- Melakukan root cause analysis
- Menentukan risk rating
- Menyusun audit recommendation
- Membuat executive summary
- Menyusun audit report
- Membuat corrective action plan
- Melakukan follow-up assessment
PT Prima Pelatihan Indonesia adalah perusahaan yang bergerak di bidang training, sertifikasi, dan pengembangan kompetensi sumber daya manusia untuk kebutuhan profesional maupun korporasi. Kami menyediakan berbagai program pelatihan berkualitas yang dirancang sesuai perkembangan industri, regulasi, dan kebutuhan dunia kerja modern. Didukung oleh trainer berpengalaman dan praktisi profesional, PT Prima Pelatihan Indonesia berkomitmen membantu individu serta perusahaan meningkatkan keterampilan, produktivitas, dan daya saing. Program yang tersedia mencakup pelatihan teknis, manajemen, legal, K3, sertifikasi profesi, hingga pengembangan soft skills. Dengan metode pembelajaran interaktif dan aplikatif, kami menghadirkan solusi pelatihan yang efektif, profesional, dan terpercaya di Indonesia Untuk Memahami Hal Tersebut Kami Menyelenggarakan Training Information System Audit 2026–2027.
Kontribusi Bimtek Pelatihan :
- Biaya Kontribusi per peserta/orang sebesar: Rp. 6.000.000,- ( Enam Juta Rupiah), dan sudah termasuk Penginapan Hotel 1 kamar untuk 1 peserta ( Singel Bed) Konsumsi Lunch & Dinner, Coffee Break.
- Biaya Kontribusi per peserta/orang sebesar: Rp. 5.000.000,- ( Lima Juta Rupiah ), dan sudah termasuk Penginapan Hotel 1 kamar untuk 2 peserta (Twin Bed) Konsumsi Lunch & Dinner, Coffee Break.
- Biaya Kontribusi Paket Non Penginapan per peserta/orang sebesar: Rp. 4.000.000,- ( EmpatJuta Rupiah , Konsumsi Lunch & Dinner, Coffee Break.
- Kegiatan dapat berupa IN-HOUSE TRAINING (dilaksanakan di ruang meeting Instansi peserta) dengan Minimal 8 Peserta.
FASILITAS PESERTA:
- Sertifikat Pelatihan dari Prima Pelatihan Indonesia ;
- Hardcopy, Modul dan Flashdisk;
- Penginapan Hotel 4 hari 3 malam (Sesuai paket permintaan);
- Konsumsi Dinner & Lunch, Coffee Break;
- Seminar Kit;
- ID Card Peserta dan Tas Pelatihan Eksklusif;
- Jaket
- Penjemputan Bandara ke Hotel Minimal
INFORMASI PENDAFTARAN DAPAT MENGHUBUNGI
Pendaftaran dapat Menghubungi Contact Person Panitia Pelaksana di No. HP/Whatsapp: 0812 3459 2947
FAQ TRAINING INFORMATION SYSTEM AUDIT
1. Apa itu Training Information System Audit?
Training Information System Audit adalah program pelatihan yang membahas proses audit terhadap sistem informasi, teknologi informasi, aplikasi, data, infrastruktur, keamanan informasi, IT governance, dan pengendalian IT.
2. Siapa yang cocok mengikuti training ini?
Training cocok untuk IT auditor, internal auditor, IT manager, IT staff, information security, IT risk, compliance, governance, cybersecurity, internal control, dan profesional yang terlibat dalam audit sistem informasi.
3. Apakah training cocok untuk pemula?
Ya. Materi dimulai dari fundamental Information System Audit, audit process, internal control, risk assessment, dan audit planning sebelum masuk ke area ITGC, application controls, cybersecurity, database, network, cloud, dan audit reporting.
4. Apa yang dimaksud IT General Controls?
IT General Controls atau ITGC adalah pengendalian umum yang mendukung lingkungan teknologi informasi, seperti access management, change management, IT operations, backup and recovery, system development, dan aspek pengendalian IT lainnya.
5. Apa yang dimaksud Application Controls?
Application Controls adalah pengendalian yang diterapkan pada aplikasi untuk membantu memastikan input, processing, output, interface, authorization, completeness, dan accuracy berjalan sesuai kebutuhan.
6. Apakah training membahas cybersecurity audit?
Ya. Materi mencakup cybersecurity governance, security controls, access security, endpoint, network security, application security, data security, security monitoring, dan incident management.
7. Apakah training membahas IT risk assessment?
Ya. Peserta mempelajari risk identification, risk analysis, likelihood, impact, inherent risk, residual risk, risk matrix, risk prioritization, dan risk-based audit planning.
8. Apakah training membahas audit planning?
Ya. Materi meliputi audit universe, audit engagement, audit objective, audit scope, audit criteria, audit methodology, audit timeline, audit resources, audit procedures, dan audit program.
9. Apakah ada latihan audit?
Ya. Peserta dapat melakukan audit simulation, risk assessment, control testing, evidence evaluation, finding development, root cause analysis, risk rating, dan audit reporting.
10. Apakah training membahas audit evidence?
Ya. Peserta mempelajari jenis dan kualitas evidence serta teknik pengumpulan evidence melalui interview, observation, inspection, inquiry, walkthrough, reperformance, dan analytical procedures.
11. Apakah training membahas audit sampling?
Ya. Materi mencakup population, sample selection, random sampling, judgmental sampling, attribute testing, control testing, exception identification, dan dokumentasi sampling.
12. Apakah training membahas audit working paper?
Ya. Peserta mempelajari struktur, dokumentasi, cross-reference, evidence reference, test result, review, confidentiality, dan quality working papers.
13. Apakah training membahas audit findings?
Ya. Materi mencakup condition, criteria, cause, effect, risk, root cause, control weakness, risk rating, finding prioritization, dan recommendation.
14. Bagaimana cara menentukan risk rating dalam audit?
Risk rating dapat ditentukan berdasarkan metodologi organisasi dengan mempertimbangkan faktor seperti kemungkinan terjadinya risiko, dampak, efektivitas kontrol, criticality proses, dan residual risk.
15. Apakah training membahas audit report?
Ya. Peserta mempelajari penyusunan executive summary, scope, methodology, findings, risk rating, root cause, impact, recommendations, management response, action plan, dan conclusion.
16. Apakah training membahas COBIT?
Ya. Training memberikan awareness mengenai konsep COBIT dan penggunaannya sebagai salah satu referensi untuk IT governance dan IT management. Kedalaman penerapan dapat disesuaikan dengan kebutuhan peserta.
17. Apakah training membahas ISO/IEC 27001?
Ya. Materi memberikan awareness mengenai ISMS, risk assessment, risk treatment, information security controls, internal audit, corrective action, dan continual improvement dalam konteks audit sistem informasi.
18. Apakah training membahas COSO?
Ya. Peserta diperkenalkan dengan konsep internal control COSO dan keterkaitannya dengan pengendalian teknologi informasi.
19. Apakah training membahas cloud computing?
Ya. Materi mencakup SaaS, PaaS, IaaS, cloud security, access control, data protection, availability, backup, disaster recovery, shared responsibility awareness, dan cloud vendor risk.
20. Apakah training membahas database audit?
Ya. Materi meliputi database access, privileges, database security, data integrity, backup, recovery, logging, configuration, dan audit procedures.
21. Apakah training membahas network audit?
Ya. Peserta mempelajari network architecture, segmentation, firewall, VPN, remote access, wireless network, configuration, monitoring, logging, dan network security controls.
22. Apakah training membahas business continuity dan disaster recovery?
Ya. Materi mencakup Business Impact Analysis, critical processes, IT dependencies, recovery objectives, recovery strategy, DR testing, recovery procedures, dan audit considerations.
23. Apakah training membahas third-party IT risk?
Ya. Peserta mempelajari vendor risk, IT outsourcing, cloud provider, due diligence, contract requirements, SLA, security requirements, performance monitoring, dan third-party assurance.
24. Apakah training dapat dilakukan secara in-house?
Ya. Materi dapat disesuaikan dengan sistem informasi, aplikasi, infrastruktur, framework, kebijakan, risiko, dan audit methodology yang digunakan perusahaan.
25. Apakah training dapat dilakukan secara online?
Ya. Training dapat dilaksanakan secara online maupun offline dengan penyesuaian metode simulasi, diskusi, studi kasus, control assessment, dan audit workshop.
26. Apa manfaat training bagi perusahaan?
Training dapat membantu meningkatkan kualitas audit IT, memperkuat internal controls, mengidentifikasi risiko teknologi, meningkatkan IT governance, memperkuat cybersecurity controls, meningkatkan compliance awareness, dan membantu manajemen memperoleh rekomendasi perbaikan yang lebih tepat sasaran.
