SYLLABUS:
a) Technology in Banks
i) Banking Environment and Technology.
ii) Overview of Processing Infrastructure.
iii) Accounting Information System.
iv) Information Organisation and Management.
v) Risk associated with Technology Banking.
vi) Audit Function and Technology.
b) Technology - System, Development, Process, Implementation
i) Hardware Architecture.
ii) Software platforms - System design, development and maintenance.
iii) SDLC (Software Development lifecycle)
iv) Networking.
c) Security and Controls, Standards in Banking
i)Security - Overview of security, Architecture, Policy, Procedure,Implementation, Monitoring.
ii) Controls - Physical Controls, IT controls, Application controls, Resources and Tools.
iii) Standards - ISO, CMM, CoBIT, RBI guidelines.
d) Continuity of Business
i)Difference between CoB, BCP and DRP.
ii) CoB Plan, policy and procedures.
iii) Risk Management and Impact Analysis.
iv) Testing and implementation of CoB, BCP and DRP.
e) Overview of legal framework
i) IT Act, Intellectual Property Right, Copyright.
f) Security policies, procedures and controls
i) Management Control Framework.
ii) Development and review of security policies and controls standards.
iii) Compliance and incident handling.
iv) Network security.
v) Security implemented by operating system and databases, Hardware and Software.
vi) Network components.
g) IS Review - Methodology and Approach
i) IS Audit as review of IS management function.
ii) Review of Human Resources Management Function, Technology Management Function, Data Management Function, Application
Management Function, Facilities Management Function.
iii) Audit Standards.
iv) Audit Organisation and Management.
v) Audit in computerised environment.
vi) Risk based audit.
vii) Substantive and compliance review. Use of CAAT's - use of general audit software.