Download
1 / 11
110 likes | 225 Views
Tatakelola dan audit ti. Indri Sudanawati Rozas. KONTRAK. Penyampaian Kontrak Perkuliahan. Overview Tatakelola dan Audit TI. Definisi Tatakelola TI. Urgensi Tatakelola TI. Implementasi Tatakelola TI. Tugas I: Tatakelola TI [SOP+WI]
E N D
Tatakelola dan audit ti Indri Sudanawati Rozas
KONTRAK • Penyampaian Kontrak Perkuliahan. Overview Tatakelola dan Audit TI. • Definisi Tatakelola TI. Urgensi Tatakelola TI. Implementasi Tatakelola TI. Tugas I: Tatakelola TI [SOP+WI] • Framework2 Tatakelola TI. Why framework? Positioning framework. • How to implement Tatakelola TI. • Pembahasan Tugas I Tatakelola TI. • Definisi Audit TI. Skill auditor TI. Softskill vs hardskill. • Metodologi Audit TI. Framework Audit TI. • Menentukan Ruang lingkup Audit TI. BG – ITG – ITP. • RACI chart. Interview. Kuisioner. Observasi. Analisis Kondisi Eksisting. • Maturity Level tool. Scale [0; 0,33; 0,66; 1]. Maturity level. • Control Objectives. Rekomendasi Audit TI. • Laporan Audit. Spider Chart. Executive Summary. • Tugas II: Eksplorasi judul penelitian di bidang Tatakelola dan Audit TI. • Pembahasan Tugas II, Bab 1 sd Bab 3. ---------------------------- UTS ---------------------------- ---------------------------- UAS ----------------------------
DEFINISI • Systematic, independent and documented process for obtaining audit evidence and evaluating it objectively to determine the extent to which the audit criteria are fulfilled. • Prosespengumpulandanevaluasifakta/buktiuntukmenentukanapakahsistem yang terkomputerisasi: • Menjagaaset • Memeliharaintegritas data • Memampukankomunikasi & aksesinformasi • Mencapaitujuanoperasionalsecaraefektif • Mengkonsumsisumberdayasecaraefisien
OVERVIEW Perusahaan Apakah divisi IT bisa membantu meningkatkan kinerja perusahaan? Divisi x Divisi x Continuous improvement PROSES AUDIT TI Divisi x Divisi x Divisi IT output Nilai Maturity Level (1-5) Rekomendasi
STEPS of it audit process • Planning • Definition of audit objectives and scope • Evaluation of control • Evidence collection • Evaluation of evidence • Reporting and follow up http://www.icisa.cag.gov.in
To be an auditor • IT auditors must acquire the right hard and soft skills, • Get the appropriate education • Build a solid foundation of experience.
Auditor Skills • Hardskill • strong understanding of general computer controls (GCCs) • data analytics • basic system infrastructure • riskassessment • Softskill • translating geek speak to business speak • ability to convey IT issues • grasp the severity of the situation • recommendations to mitigate the risk Cliff Donathan, CIA, CISA, CISSP sumber http://www.theiia.org/intAuditor/itaudit/2012-articles/so-you-want-to-be-an-it-auditor/
top seven AUDITOR skills From IIA’s survey of 461 internal audit professionals in North America: • Analytical and critical thinking – 73% • Communication skills – 61% • Data mining and analytics – 50% • General IT knowledge – 49% • Business acumen – 46% • Industry-specific knowledge – 34% • Risk management – 33%
Sumber: @pervertauditor • Knowledge • Interpersonal skill • Willingness to learn • Skeptisme • Analytical thinking • Mental baja http://saputraroy.com/2013/01/18/wawancaur-pervertauditor/
AUDITOR SOFTSKILL 11. Empati 12. Perhatian 13. Teamwork 14. Leadership 15. Loyalitas 16. Komunikasi 17. Critical Observation 18. Problem Solving 19. Complication 1. Jujur 2. Disiplin 3. Bertanggung Jawab 4. Ramah 5. Sopan 6. Cepat beradaptasi 7. Hardworker 8. Teliti 9. Cerdas 10. Peka http://repository.upi.edu/operator/upload/d_pu_1009675_chapter2.pdf
Tipe pertanyaan TipeTertutup: • Kebaikan: cepat, mudah. • Keburukan: terauditharusmemutuskanapakahharusmenjawab “ya” atau “tidak” (tidakadapenjelasan). Tipe Terbuka danPenjelasan • Kebaikan: mengetahuijawabansecararinci. • Keburukan: menghabiskanbanyakwaktudanbiaya.
