INTOSAI Development Initiative About us & our e-learning initiatives

The IDI Part-I: About the IDI Part-II:E-learning on ‘Auditing IT Controls’ Part-III: Preliminary lessons learned

Part-I About the IDI

Why the IDI? Strengthen Supreme Audit Institutions In developing countries Deliver mandates more effectively

When was it born 1986, Chaired by SAI Canada Chaired by SAI Norway since 2001 Other Board Members: Canada The Netherlands UK Senior Executives, SAI Norway

Our strategy 2007-12

Vision A global leader in strengthening capacities of Supreme Audit Institutions

Mission The IDI is a non-profit organisation that aims to enhance the institutional capacity of Supreme Audit Institutions in developing countries through needs-based, collaborative and sustainable development programmes in INTOSAI regions and groups of SAIs to meet the existing and emerging needs of stakeholders.

To effectively enhance the professional capacity of SAI staff Goal-1 To effectively enhance the professional capacity of SAI staff

To support institutional strengthening efforts in SAIs Goal-2 To support institutional strengthening efforts in SAIs

To contribute to SAIs’ knowledge sharing efforts Goal-3 To contribute to SAIs’ knowledge sharing efforts

Goal-4 To organise and manage the IDI in ways that secure economical, efficient and effective operations while promoting a motivational working environment

Integrity Openness Cooperation Innovation Diversity Relevance

Part-II E-learning On Auditing IT Controls

IDI’s e-learning initiatives Synchronous mode with OLACEFS & OAS Asynchronous with ISCITA AFROSAI-E, ASOSAI & CAROSAI

The e-course Title: Auditing IT Controls Based on ISCITA’ s courseware 21 modules, 20 hours Pre-assessment (75% to qualify) Post tests for each module (75% to qualify) Asynchronous delivery CBT & on-line WBT modes WBT available for one year

Learners Currently 480 nominees, 36 SAIs Afrosai-e: 156, 9 SAIs Asosai: 128, 11 SAIs Carosai: 196, 16 SAIs Interest also expressed by 8 other SAIs in Asosai

Learning Principles Pre-requisite qualifications Focused learning objectives Substantial learner autonomy Multiple learning strategies Learning by doing in safe environment Builds on existing learner competence

Learning Principles Real work scenarios from different target Regions Learning transfer: Audit checklists Learning assessed periodically Gender and racial considerations

Preliminary lessons learned Part-III Preliminary lessons learned

Preliminary lessons learned High demand on project mgt skills Frequent communication with vendor critical Initial investment high, per participant cost low Learning approaches: Expectation differences proved costly Available content not conversion friendly Long design & development period

Preliminary lessons learned Pilot testing CBT with ‘reference group’ useful Better if adopted also for LMS & WBT testing Content updating limited Discussion forum Creating FAQs Learning interactivity Demanded creative designing Is internet quality dependent

Preliminary lessons learned CBT administration a challenge Limited ’learning community’ development Post-course learning transfer remains critical

Thank you

Course modules Intro to IT Audit Audit Objectives Control Frameworks Planning & Reporting Documenting IT Systems Intro to General Controls Management controls IT Operations Physical & Env. Controls Logical Access Controls Change Management Systems Dev. Controls Network Controls 3rd Party Services End User Computing BCP Intro to Application Controls Application Security Input-Process-Output Controls Master Files & Standing Data Compliance Testing