Auditing IT Outsourced Environments

COURSE OBJECTIVES:
• Understand the benefits and risks of outsourcing
• Identify the specific risks and controls for the various outsourced environments
• Describe how to use a Third-Party Report as an audit tools
• Identify common issues that have arisen in both the process of outsourcing and how to audit the outsourced business processes

COURSE OUTLINE
Defining Outsourcing
• Outsourcing concepts/terms
• Outsourced scope
o Applications
o Infrastructure
o Development
• Cloud Computing
• Comparing Company and Vendor Motivation for Outsourcing

General Risks
• Company risks
o Strategic
o Financial
o Operational
o Organizational
• Vendor Risks
• Additional Risks with Cloud Computing

Organizational Changes Required to Manage Outsourcing
• Issue Management
• Delivery ManagementRisks
• Relationship Management

Contracts
• Considerations in the New Contract
o Intellectual Property
o Auditability
o SLAs
• Managing Audits with In-Force Contracts
• Regulatory Compliance
• Governance

Auditing the Outsourced Environment
• The effect on the audit universe
• Planning
• Scoping the audit to satisfy audit requirements
• Understanding the your limits in auditing the vendor
• Overcoming compliance issues
• Using Third-Party Reports
o Understanding the Benefits and Limitations of the Third-Party Reports
o Types of Third-Party Reports (SSAE16, SOC 1/2/3)
• Performing the audit
o Gap analysis
o Internal gap remediation
o Vendor gap reporting and remediation
o Auditing contract and service level compliance
o Solving vendor/company differences
o Auditing contract and service level compliance
• Relationship management

METHODOLOGY
The training methodology integrates lectures, interactive discussions, collaborative group exercises, and illustrative examples. Participants will acquire a blend of theoretical insights and hands-on practical experience, emphasizing the application of learned techniques. This approach ensures that attendees return to their professional environments equipped with both the competence and self-assurance to effectively implement the acquired skills in their responsibilities.

DATE:
1ST BATCH: 3rd – 6th June,2025
2ND BATCH: 16th – 19th Dec,2025