Background

Information security audits will often assess an organization’s compliance with or adherence to established regulatory frameworks or control standards.IT Security Audit guarantee information systems’ availability, confidentiality, and integrity. A typical IS Audit encompasses, Vulnerability Assessment, Penetration Testing, Compliance Audit, Application Audit and Network Audit. Data Security. The common challenges in IS Audit are surmounted by complexity of IT Systems, widening threat landscape, regulatory compliance and resource limitations. It is incumbent on the part of all the regulated entities to put in place an Information Security Audit framework describing key aspects, including its mandate, purpose, authority, audit universe and periodicity of audit.

Objective

This program aims to sensitise the senior officials from the financial sector on the approach and various aspects to focus upon relating to IS Audit and Information Security. This program will also give an opportunity for peer level discussion and interaction with the regulators.

Program Highlights

The program will deal with the following topics:

• Risk Based IS Audit
• Regulatory & Standards Landscape
• Risk Based IS Audit Methodology
• Auditing IT Governance & IT/IS Risk Management
• Auditing IT Infrastructure, Operations & ITGC
• Cybersecurity, Resilience & BCP/DR Audit
• Auditing Payment Systems & Digital Payment Channels
• Auditing Outsourcing, Third Party & Cloud
• Data Governance, Data Protection & Privacy Audit
• A Panel Discussion: Risk Based IS Audit: Regulatory Expectations, Assurance Gaps and the Road Ahead
• Emerging Technology: AI Governance & Post Quantum Cryptography