The 3rd Information Systems Audit Champions Programme (ISACP) begins
Module 1 workshop in Kigali, Rwanda, from 17 to 21 July 2023.
AFROSAI-E started the IS Audit Champions Programme (ISACP) in 2017 in partnership with OAG Norway. The programme aims to build practical capacity in the IS audit function of the SAI, enabling them to conduct audits of critical information systems and adequately support financial, compliance and performance auditors.
The programme has four modules with content that covers basic knowledge and skills for IS auditors. It involves training workshops interspersed with pilot audits on focus areas where SAIs have struggled to build capacity. The third IS Audit Champion Programme began this year, with the first workshop taking place in Rwanda from 17 to 21 July 2023.
SAI Rwanda hosted the module one workshop as part of their collaboration with AFROSAI-E on IS audit. Module one focused on the basic audit of Oracle Databases. The workshop included twenty-three participants, including the four facilitators, from nine SAIs (Rwanda, Somalia, Kenya, Zambia, Zimbabwe, Gambia, Tanzania, Sierra Leone, and Uganda). We also had a participant from SAI Palestine (a partner of SAI Norway).
The strategic outcomes of the ISA Champions Programme include having SAIs produce value-adding integrated audit reports which adequately include IT/IS issues and improvement of IS audit skills and knowledge in SAI staff. The programme links to the AFROSAI-E Institutional Capacity Building Framework (ICBF) components of the SAI’s annual IS audit coverage of critical IS systems and audit of the country’s main integrated financial management expenditure and revenue systems.
The 2nd module workshop will take place from 13 to 17 November in Pretoria, South Africa.
“The session was engaging and reflective to me as a trainer on the importance of trainee engagement. As a trainer, I feel we need more time to allow for the use of practical audit cases and the interpretation of findings. This would enable the trainees to apply the findings from the audit programme better and report on issues in a way that would feed into the financial and compliance audit methodology when supporting financial audits.” Eddah Dena, a facilitator from SAI Kenya
“The Rwanda Training was captivating and an eye-opener as I extracted, analysed, and interpreted data from the Oracle database. The atmosphere was filled with knowledgeable facilitators and participants with vast knowledge and skills.” Elliot Sabiti, a participant from SAI Zimbabwe
As an aspiring Information Systems Auditor, attending the training on auditing Oracle databases was an incredibly enriching and enlightening experience. The programme gave me a comprehensive understanding of the intricacies of auditing complex database systems like Oracle.
From the outset, I was captivated by the facilitators’ depth of knowledge and expertise. They skilfully combined theoretical concepts with practical applications, making the learning process engaging and relevant. The training started with an overview of IS auditing methodology and then moved on to database management systems and their critical role in organisations. Understanding the significance of data integrity, confidentiality, and availability laid a strong foundation for the later sessions.
One of the most valuable aspects of the training was the hands-on approach taken to explore Oracle databases. We were guided through practical exercises, allowing us to navigate the Oracle environment, execute SQL queries, and analyse the results. This experiential learning not only reinforced our understanding of the theoretical concepts but also equipped us with the skills to perform actual audits on Oracle databases.
The training delved into various aspects of database auditing, including access controls, user privileges, and security configurations. Learning about the different types of audits, such as financial, performance, and compliance audits, provided a comprehensive perspective on the auditing process. Throughout the training, the emphasis on industry good practices and compliance standards was evident. We explored relevant regulations and frameworks, such as ISO 27001, COBIT and CIS, which are vital in shaping auditing processes and ensuring data protection. The facilitators shared real-life examples and case studies illustrating the significance of compliance and how auditors enhance an organisation’s data security posture.
Moreover, the collaborative nature of the training allowed for meaningful interactions with fellow participants. Discussing challenges, sharing insights, and learning from each other’s experiences fostered a supportive learning environment. These networking opportunities expanded my professional circle and provided avenues for future collaborations and knowledge exchange. As the training concluded, I gained confidence in my ability to assess database security, identify vulnerabilities, and provide recommendations for improvement. The training has undoubtedly laid a solid foundation for my journey as an IS auditor. I am excited to apply my knowledge and skills to help organisations safeguard their critical data assets. Osman Mansaray, a participant from SAI Sierra Leone
I must appreciate the facilitators who conducted the training. Their knowledge and expertise in Oracle databases were truly impressive, and their ability to engage with the participants made the learning experience even more enriching. They practically explained complex concepts and encouraged active participation, significantly contributing to our understanding.
Moreover, I particularly enjoyed the practical nature of the course. The hands-on exercises and real-world examples helped me grasp the concepts more effectively. This approach bridged the gap between theory and practical application, making the learning process seamless and enjoyable.
Once again, I sincerely thank the AFROSAI-E, facilitators, and everyone involved in making this training a success. The knowledge gained and my enjoyable experience will undoubtedly positively affect my professional growth and development and my contribution to my SAI.
Thank you for organising such a fantastic training programme, and I look forward to any future opportunities to learn and grow with AFROSAI-E. Evelyn Awinja Malova, a participant from SAI Kenya
Thinking of audit procedures to audit the database system initially was too challenging. However, the consistent audit approach presented by the trainers starting from planning, executing, and reporting, gave me broader knowledge and skills. I especially appreciated the facilitators’ approach of leaving no one behind. The knowledge sharing among participants made my workshop expectations achievable. Thanks again to the trainers and colleagues for sharing their insights and experiences. My main takeaway was extracting and analysing the data and bringing out the figures to match the findings to make yourself more relevant. Ibrahim Fofanah, a participant from SAI Sierra Leone
