1. SAI-India

2.  The Working Group on IT Audit (WGITA) was created at the XIII INCOSAI in Berlin in 1989.  WGITA is chaired by SAI-India and represented by 40 members/observers as on date.  The Working Group was set up to provide support to member SAIs in developing their knowledge and skills in the use and audit of Information Technology.  The WGITA fulfills its mission and mandate by implementing a triennial work plan.  Projects can be of a variety of types and include guidance papers, website related information, surveys and other audit material. Comptroller and Auditor General of India

3.  WGITA Work Plan (2011-2013) will expire in October 2013 i.e. after XXI INCOSAI.  Generally, five projects are undertaken in the Work Plans. However, this time, we are proposing to select only three projects due to an ISSAI project.  To identify projects for the purpose of the next Work Plan of the WGITA for the period 2014-2016, SAI- India conducted a IT survey requesting the member SAIs to give feedback on the previous products of the WGITA and provide list of the probable projects.  About 21 member SAIs forwarded duly filled in survey form totaling 61 probable projects for next work plan.61 probable projects Comptroller and Auditor General of India

4.  We identified 20 common projects out of total 61 projects.20 common projects  The shortlisted 20 projects were forwarded to all WGITA members for ranking from 1 (most preferred) to 20 (least preferred).  Based on the result of the ranking analysis, the following three projects have emerged as the most preferred choices:ranking analysis  IT Governance (proposed by SAI-Slovenia)  Data Mining as a Tool in Fraud Investigation (proposed by SAI-Kuwait)  Audit Management System as a tool for IT Audit (proposed by SAI-Oman) Comptroller and Auditor General of India

5.  In addition to three projects mentioned in the previous slide, the following two projects are also proposed: ◦ Revision of ISSAI-5310 on ‘Information System Security Review Technology’, which is due for review in 2013. ◦ Overarching of ISSAI-5300 covering the general principles, approach and methodology of IT Audit.  The project on revision of ISSAI-5310 is proposed to be completed by XXI INCOSAI to be held in Beijing, China in October 2013.  Details of the above two ISSAI projects would be discussed tomorrow by my colleague, Mr. Saurabh Narain. Comptroller and Auditor General of India

6.  Therefore, four projects would be included in the Work Plan for the period 2014-2016 whereas one project is expected to be completed by next INCOSAI.  SAIs wishing to lead and participate as members in these three projects is given below: #Name of the projectSAIs intending to lead the project SAIs intending to become members 1.IT GovernanceBrazil, USABangladesh, Zimbambwe, Kuwait, Iraq and Lithuania 2.Data Mining as a Tool in Fraud Investigation ChinaRussian Federation, Bangladesh, Kuwait and USA 3.Audit Management System as a tool for IT Audit USABangladesh, Kuwait and Zimbambwe 4.Development of ISSAI-5300 on ‘Guidelines on IT Audits’ India Comptroller and Auditor General of India

7.  Based on discussions in this meeting, the composition of the project team would be decided.  The project team is required to submit project initiation document for approval of Chair, WGITA at the earliest.  The project initiation document should invariably include expected timeline of the project. However, the same should be before the XXII INCOSAI.  The project team is also expected to furnish progress report of the project undertaken by them from time to time to the Chair, WGITA. Comptroller and Auditor General of India

8. Thank you Comptroller and Auditor General of India