IT Audit - How to Perform Systems & Applications Walkthrough

Name: IT Audit - How to Perform Systems & Applications Walkthrough
Rating: 4.6 (827 reviews)

Learn how to conduct an IT Audit Walkthrough | ITGC | GRC | SOX | Controls Testing

Created byAlexander Shafe

Last updated 3/2026

English

English [Auto],Spanish [Auto],

What you'll learn

Preparing for an IT Audit Walkthrough
How to Conduct a System/Application Walkthrough
Reporting on IT Audit Walkthrough
IT Application Controls
IT General Controls
IT Audit Process

Course content

5 sections • 34 lectures • 4h 5m total length

Introduction1:25
Explore how to conduct a live it audit walkthrough to test control designs, identify gaps, prepare questions, gather evidence, and address deficiencies with hands-on practice.
Walkthrough Questionnaire6:30
Learn to conduct an IT audit walkthrough with a standardized questionnaire. Prepare questions, gather evidence, and simulate the walkthrough across general controls, access control, and sdlc.
Walkthrough Questionnaire & Audit Client3:56
Learn how to conduct IT audits using walkthrough questionnaires, balancing remote and office work, prefill or send questionnaires to application owners, and leverage collaboration tools to accelerate planning and meetings.
Questionnaire - System/Application Information8:31
Conduct a walkthrough of five applications using individual questionnaires, identify application owners and system administrators, and classify each app by risk (high, medium, low) to coordinate through the appropriate owners.
Questionnaire - System/Application Information II8:30
Learn to gather and confirm application information, identify data sources and inter-system interfaces, and assess data types, users, and controls through a walkthrough questionnaire in IT audit.
Questionnaire - Access Provisioning7:17
Explore access provisioning controls in IT audits by mapping the request, approval, and provisioning workflow, analyzing manual versus automated processes, and verifying segregation of duties with evidence.
Udemy Review System1:25
Explore Udemy's review system, including early prompts, editing ratings and reviews, and providing feedback via the dashboard or email for a better learning experience.
IT Auditors & Audit Client3:57
Learn how IT auditors influence governance and cultivate relationships with departments to become a trusted partner, helping prevent financial risk and ensure issues are addressed.
Access Deprovisioning3:49
Explain how access deprovisioning works, verifying removal of user access through common tools like Jira, detailing processes, timelines, and policies, and emphasizing evidence gathering during IT audits.
User Access Review12:21
Learn how to perform an annual general access review led by the application owner, using managers for revalidation and documenting evidence in tickets, with automation options via JIRA or ServiceNow.
Roadmap to Becoming an IT Auditor, GRC Analyst or TPRM Professional5:09
Explore two pathways to IT audit, GRC, or third-party risk roles. Start with foundational courses, add walkthroughs and interview prep, and optionally Excel and cloud security training.

Questionnaire - Application Sign-On3:25
Explore how users sign into applications, including vpn requirements, user id and password, multi-factor authentication, and single sign-on, to assess general and privileged access security.
Systems and Application Password Configuration2:44
Explain password policy across organizational applications, including minimum length, character requirements, reset on first login, and cadence, and discuss balancing vendor capabilities with risk tolerance during testing.
Change Management12:02
Data Backup & Recovery10:59
Explore backup and recovery of application data, decide whether to back up within the application or to a server, and understand safeguarding copies on a hard drive for business continuity.
Applications, Servers & Databases9:11
From an IT audit perspective, learn to test applications, servers, databases, and operating systems, including access, backups, and SOC considerations for third-party data. See GitHub, SQL Server, and MySQL examples.
Applications, Servers & Databases II9:15
Auditors test not only the application data but also the server and database backups, verifying who has access and who handles recovery, including potential cloud or third-party setups.
Data Backup Schedule10:39
Audit a data backup schedule across GitHub to the server, verify daily SAP Hana backups every two hours, and review logs and history to prove successful restores.
Data Backup Notifications8:40
Review automated data backups every two hours, verify through history and logs. Understand local storage and the notification system for backup success or failure.
Data Backup Location5:54
Assess data backup location and schedule across applications and external storage, verify logs and SOC reports, and demonstrate testing one sample during walkthrough.
Incident Management5:25
Explore incident management in it audit, focusing on incidents triggered by changes and backups, tracking and resolving them, and understanding the limited role of sdlc controls.

Preparing For A Walkthrough5:40
Practice a simulated IT walkthrough with two auditors and application staff, featuring probing questions, role play, notes, and sandbox testing to validate controls and evidence.
IT Audit Team and Application Owners5:44
Lead IT auditors organize a walkthrough with application owners, introduce the team, assign roles (system administrator and owners), and align on questions and the shared questionnaire for a GitHub test.
Systems & Application Information6:35
Explore how the systems and applications walkthrough uses GitHub repositories for SAP and upcoming Workday, with SQL Server integrations, and identifies developers as primary users and audit questionnaire practices.
Systems & Application Interfaces6:38
Explore how the application interfaces with servers and SAP, with ongoing Workday integration, and how GitHub-developed code is tested before production, including flow diagrams for data flow.
Access Provisioning & Deprovisioning13:04
Explore how access provisioning for GitHub works, from Jira requests and manager approvals to IT-led provisioning and VPN prerequisites, and how HR-triggered deprovisioning handles departures.
User Access Review10:49
Learn how to perform user access reviews by applying policy timelines—24 hours for privileged and 3 days for general access—using Jira and GitHub to verify, document, and manage ongoing access.
Live Sign-On to Application9:15
Sign in through VPN and use two-factor authentication, capture evidence with snipping, and verify access in the sap hana repository by identifying owners, administrators, and collaborators.
Privilege & General Users Review11:39
Examine how repository owners and collaborators exercise privileged access, and verify administrator and general user permissions during an IT audit walkthrough to document access controls.

Password Configuration Review7:49
Auditors review password configuration against policy, explain minimum eight characters, character requirements, and two factor authenticator, and discuss compensating controls and risk acceptance when eight characters cannot be met.
Change Management Review7:40
Learn how change management governs code changes through formal requests, approvals, testing, and rollback plans, with code stored in GitHub and tracked via Jira incidents and tickets.
Data Back-Up & Recovery9:26
Learn how sap hana backups run daily every two hours via sql server agents, with email alerts and jira-based incident tracking for data recovery and annual disaster recovery testing.
Walkthrough Meeting Wrap-Up9:46
Set clear next steps after the walkthrough, request the flow diagram and password policy, and outline evidence collection and a test-of-one sample for access controls.

Requirements

No course requirement or prerequisites

Description

In today's fast-paced digital environment, ensuring the integrity and security of IT systems is paramount. "IT Audit Systems & Application Walkthrough" is a comprehensive course designed to equip IT professionals, IT Auditors, GRC professionals and Compliance officers with the knowledge and skills required to effectively conduct an IT Audit walkthrough. This course covers the essential concepts, methodologies, and best practices necessary to perform detailed and systematic evaluations of IT processes, controls, and systems and applications.

Key Learning Objectives:

Understand IT Audit Fundamentals: Gain a foundational understanding of IT audit principles, the role of IT audits in organizations, and the importance of audit walkthroughs in assessing control effectiveness.
Prepare for an IT Audit Walkthrough: Learn how to plan and prepare for an IT audit walkthrough, including identifying key areas of focus, defining objectives, and gathering necessary documentation.
Conduct Effective Walkthroughs: Develop practical skills to execute IT audit walkthroughs, including interviewing stakeholders, observing processes, and evaluating control environments.
Document Findings and Analyze Results: Master techniques for documenting observations, analyzing audit evidence, and identifying potential risks and control gaps.
Report and Communicate Outcomes: Learn how to compile audit findings into clear, actionable reports and effectively communicate results to management and other stakeholders.

Course Requirement or Prerequisites

This course does not require any prior knowledge or specific academic background. The only requirement is having a laptop or desktop computer. All materials necessary for learning this course would be provided or downloaded free from the internet.

Who this course is for:

Any one seeking to become an IT Auditor, IT Security Analyst, Risk Analyst, Compliance Analyst

IT Audit - How to Perform Systems & Applications Walkthrough

What you'll learn

Explore related topics

Course content

Introduction11 lectures • 1hr 3min

Walkthrough Questionnaire10 lectures • 1hr 18min

Application Walkthrough8 lectures • 1hr 9min

Backup & Recovery4 lectures • 35min

Conclusion1 lecture • 1min

Requirements

Description

Who this course is for: