IS Audit Champions Course Module 3 Workshop: 26 – 30 August 2024

From 26 to 30 August, AFROSAI-E hosted a pivotal training workshop as part of the IS Audit Champions Programme. This was the third module in a four-course series designed to elevate the IS audit capabilities of Supreme Audit Institutions (SAIs) across Africa. Focusing on the Basic Audit of MS SQL Databases and the Basic Audit of Active Directory, this workshop brought together audit professionals to enhance their technical skills and knowledge in these critical areas.

Workshop Participation and Objectives

The workshop attracted eleven participants from the SAIs of Namibia, The Gambia, Somalia, Zimbabwe, Zambia and Kenya. Under the expert guidance of our facilitators, Sylvia Birabwa (SAI Uganda), Mtowa Mponda (SAI Zambia), and Keabile Monyama (SAI Botswana), this diverse group of audit professionals, the participants were immersed in hands-on training that combined theoretical knowledge with practical, hands-on sessions.

The core objectives of Module 3 were to:

• Deepen participants’ understanding of MS SQL databases and Active Directory.
• Equip them with practical techniques for conducting comprehensive audits of these systems.
• Improve the quality and relevance of audit reports produced by their respective SAIs.

Training Content and Activities

The workshop’s curriculum was carefully designed to cover both foundational and advanced aspects of IS auditing. Key sessions included:

• Introduction to MS SQL and Active Directory: Participants explored the architecture, roles, and key components of these systems, which are integral to securing IT environments.
• Audit Preparation and Execution: The training emphasised the identification of audit objectives, risks, and controls specific to MS SQL and Active Directory. Participants conducted risk assessments, evaluated security settings, and audited user access roles, permissions, and data integrity.
• Audit Reporting: Effective communication of audit findings was a critical focus, with participants learning to document results, assess risks, and formulate actionable recommendations.

Outcomes and Achievements

The workshop successfully met its objectives. Participants demonstrated significant improvements in their ability to audit MS SQL databases and Active Directory environments, thereby enabling them to assess the integrity and security of these critical systems used by governments in their respective nations.

This module was pivotal in advancing the strategic goals of the IS Audit Champions Programme, particularly in ensuring that SAIs can produce value-adding integrated audit reports that comprehensively address IT/IS issues. The training also played a crucial role in enhancing the overall IS audit skills and knowledge of SAI staff, empowering them to support financial, compliance, and performance auditors more effectively.

Going forward

To reinforce the skills acquired during the workshop, participants must conduct pilot audits within their respective SAIs, applying the techniques learned to real-world scenarios. These pilot audits will serve as practical applications of the training and provide valuable feedback for future modules.

“Collaboration is the key to unlocking shared knowledge and achieving greater audit excellence across our region” Mtowa Mponda, Zambia

In addition, participants are encouraged to provide continuous feedback to AFROSAI-E on their experiences and challenges faced during the pilot audits. This feedback will be instrumental in refining and improving the content of future training modules. The facilitators will remain available to offer ongoing support as participants integrate the knowledge gained into their day-to-day audit functions.

The knowledge and techniques gained during this workshop will undoubtedly lead to more effective and integrated audits within the participating SAIs, ultimately supporting the goal of maintaining secure and efficient national information systems.

“As we look forward to the next steps in our programme, we are confident that the skills and knowledge gained during this module will significantly contribute to the improved audit capabilities of participating SAIs. We eagerly anticipate the practical application of these skills in the upcoming pilot audits, where participants will put their newly acquired expertise to the test.” Sylvia Birabwa

Looking ahead, the final module in this series, scheduled for December 2024, will focus on the Basic Audit of Networks and Firewalls. This module will further advance the IS audit capabilities of the participating SAIs, ensuring they are well-equipped to tackle the complexities of modern IT environments.