Author: Ian Musgrave

One of the biggest challenges for IT Auditors is the need to explain complex findings in business-focused language to a broad 'client' group which includes departmental management, senior executives, the Audit Committee and even the Head of Internal Audit (HIA). A further problem is that IT auditors often come from a technical background, and may possess fairly narrow report-writing skills. This article offers some suggestions for improving the structure and content of the IT audit report which, as our core end product, is an essential competency.