IT auditor and IT projects

Besides conducting audit, IT auditors are often involved in IT projects to ensure that adequate security and controls are considered and built into the systems regardless whether it is developed in-house or acquired from the vendor.

This involvement is to ensure that control issues are highlighted at the early stage as it might be costly too implement control when the system is already live, up and running.

The involvement is a preventive (pre-implementation), rather than detective (post-implementation).

The auditors should maintain its independence as stated in the iS Auditing Standards issued by ISACA.