Design of an Automation Model for Taking Documentary Evidence of Compliance Tests of the IT Audit

Abstract

Nowadays IT audit is a priority for large, medium and small companies, for this reason techniques and methodologies have been developed to manage IT audits, in order to avoid the spread of threats and risks within organizations. For the project development, methodologies and good practices were investigated in order to manage IT audits, looking for the most aligned to the collection of evidences as well as the execution of the tests that are done to the controls in the systems of information, the foregoing aims to make a diagnostic selection of the available methodologies for IT audit evidence collecting, as well as identify the characteristics of the applications used in the management of IT audits also called CAAT tools with their functional aspects to categorize their effectiveness against applied methodologies, for the analysis of the results of the methodologies and thus propose a model to automate the collection of documentary evidence in compliance tests in IT audit, based on a methodology.