Establishing and Approving an Audit Charter

The first audit objective is to establish an audit charter, which gives you the authority to perform an audit. The audit charter is issued by executive management or the board of directors.

note.eps

When we refer to management, we are referring to the auditee unless stated otherwise.

Figure 3-1: Overview of the audit process

f0301.eps

The audit charter should clearly state management’s assertion of responsibility, their objectives, and delegation of authority. An audit charter outlines your responsibility, authority, ...

Get CISA® Certified Information Systems Auditor®: Study Guide, Third Edition now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.