Muhammad Saqib Ali

IT Audit Assistant Manager @KPMG UK

As Assistant Manager, the role included scoping of appropriate GITCs according to ACs and Information identified by the Financial Audit Team as in-scope for IT Audit testing; the review of the work performed by the IT Audit Analysts/Associates on the engagement(s); key contact for audited entity contacts; point of escalation for IT Audit issues identified throughout the course of the engagement; reporting findings to the entity and provide assessment on the impact to the audit; and (where applicable) reporting into more senior IT Audit staff on the engagement. Part of the Centre of Excellence team for the ISA315R review to identify the IT applications and other aspects of the entity’s IT environment (such as the databases, operating system, and network) that are subject to risks arising from the use of IT. Areas of focus included: • ISA315R procedures review to understand and evaluate the entity’s IT environment. • Understanding, evaluation, and validation of process level automated controls (ACs) and Information that we use as audit evidence. • Understanding, evaluation, and validation of relevant General IT Controls (GITC\'s) that support the consistent operation of the above AC\'s and Information, including determination of relevant risks arising from IT (RAFIT\'s). Other engagement specific experience that is relevant included: • Program Development/Project Management • Cyber Risk considerations