© SidorArt/Shutterstock.
CHAPTER 15
Ethics, Education, and Certification for IT Auditors
TECHNOLOGY HAS TRANSFORMED OUR lives and businesses alike. The simple truth is, nowadays, most businesses are so reliant on their technology that without access to their data and online services a company will struggle to operate. For many organizations, the impact of any long-term technology failure could be devastating. Consider a 2019 CNBC article that quoted the insurance carrier Hiscox; the article stated that 60% of small businesses go out of business within six months of a cyberattack.
With such high stakes it is important to find a qualified auditor to assess the health and adequacy of the technology control environment. As in any profession, the skills of a knowledgeable information technology (IT) auditor cannot be undervalued. However, in a career with an ever an evolving technology landscape, auditors must also continuously evolve their skills and knowledge base. Therefore, it is prudent to consistently keep up with new laws and regulations to ensure IT security compliance.
Professional certifications ensure auditors continually acquire new knowledge bases and ensure the disciplines are applied consistency across an industry. This is especially important because as an auditor, you play an integral role in upholding the security of an organization. Keeping up with your certifications, knowledge of current practices and ethics, and continued fieldwork lends credibility to your auditing work. Organizations also rely on IT auditors to perform their work ethically with independence, integrity, and objectivity.
In this chapter, you will learn about certifications and careers in the auditing profession. You will also examine professional ethics and codes of conduct that auditors are required to uphold.