Auditing IT Projects Audit Report Template - Isaca141审计项目审计报告模板.doc

Conducted in Conformance with the International Standards for the Professional Practice of Internal Auditing insert company logo INTERNAL AUDIT REPORT INSERT SYSTEM NAME PRE expected benefits are not realized or not realized timely A lack of management control over systems could lead to non compliance of required regulations resulting in fines and or penalties 6 AUDITAUDITAUDIT DETAILSDETAILSDETAILS OBSERVATIONSOBSERVATIONSOBSERVATIONS IA performed an audit of the Insert System Name System Implementation Project the Project based on the system development lifecycle which consisted of the following phases 1 Project Governance 2 Business Case Project Planning 3 System Development Design Build 4 Testing 5 Pre Go Live Data Conversion 6 Training 7 Support Maintenance 8 Project Assessment 9 Internal Control Assessment IA notes the results of each phase as follows 1 Project Governance Insert a brief summary of the results of each phase 2 Business Case Project Planning Phase Insert a brief summary of the results of each phase should summarize audit memorandum 3 System Development Design Build Phase Insert a brief summary of the results of each phase should summarize audit memorandum 4 Testing Phase Insert a brief summary of the results of each phase should summarize audit memorandum 5 Pre Go Live Data Conversion Phase Insert a brief summary of the results of each phase should summarize audit memorandum 6 Training Phase Insert a brief summary of the results of each phase should summarize audit memorandum 7 Support Maintenance Phase Insert a brief summary of the results of each phase Pre System Implementation Post System Implementation 7 8 Project Assessment Phase Insert a brief summary of the results of each phase make sure to include the Project Lead s identified lessons learned and Internal Audit s assessment of each item noted 9 Internal Controls Assessment Insert a brief summary of the results of each phase make sure to note any control deficiencies 8 FINDINGSFINDINGSFINDINGS ANDANDAND RECOMMENDATIONSRECOMMENDATIONSRECOMMENDATIONS No Finding ImpactRecommendationManagement ResponsePriority 1 Insert Finding Control Gap Reference Cobit 5 management practice activity or other best practice regulation requirement Insert Recommendation Owners Insert Owner of Finding Insert Management s Response Insert low medium high Audit Follow Up If Finding was addressed during the audit note follow up procedures performed and whether or not finding has been closed If not applicable delete row 9 No Finding ImpactRecommendationManagement ResponsePriority 2 Control GapOwners Audit Follow Up 10 ACTIONACTIONACTION PLANPLANPLAN A follow up review of management s implementation of actions in response to the recommendati