Information System Audit

Abstract

My name is Al Emam Emon, and I am a student with the ID 172-35-2185, pursuing a Bachelor of Science in Software Engineering with a major in Cyber Security at Daffodil International University. As a part of my academic curriculum, I am undertaking an internship as an auditor for information systems at Sami Tech LTD in the IT audit department, starting from November 1st, 2022.Working in the field of cybersecurity has always been a passion of mine, and this internship presents a tremendous opportunity to gain practical experience in this vast and vital area. This report is a culmination of my academic knowledge and hands-on experience during my time at SAMI TECH LTD throughout the internship period. Daffodil International University, recognized as one of the top private universities in Bangladesh, offers an excellent opportunity for students interested in the field of cybersecurity. They provide a concentration in cybersecurity as part of their science degree program. As a cybersecurity student, this internship became an integral component of my undergraduate studies. In my third year of study, I achieved the Certified Ethical Hacker (CEH) certificate, further enhancing my skills and knowledge in the cybersecurity domain. Throughout my undergraduate education, I gained insights into various areas, including vulnerability assessment, penetration testing, digital forensics, and information system auditing. During my adult education in information systems, I discovered a keen interest in pursuing a career as an Auditor. This internship has been a valuable experience, allowing me to bridge the gap between theory and practice, enriching my knowledge, and honing my skills in the field of information systems auditing. It has been instrumental in paving the way for a fulfilling career in this dynamic and critical area. 9 © Daffodil International University 1.3 Motivation The primary motivation for seeking an internship is to gain valuable industry experience under the mentorship of experienced experts. Although a college program lays the groundwork, obtaining hands-on exposure in real-world scenarios is crucial, and an internship provides exactly that. Furthermore, this chance will greatly influence and propel my career as an IT system auditor. 1.4 Objectives The primary objective of my internship revolved around complementing my theoretical academic knowledge with practical experience in the field. I aimed to grasp the fundamental concepts, components, and overall workings of IT audit as a business. Throughout the internship, I acquired a substantial amount of technical knowledge and skills. Moreover, being part of a team during the internship provided me with an excellent opportunity to enhance my communication and leadership abilities. In addition to these goals, there were several other objectives I sought to achieve: To know more about ISO, NIST, PCI DSS and also others standards. ● To know about gap analysis process ● To know about different type of Audit framework on Information Security ● To know about proper report writing way ● To know about how different organizations works internally ● To know about auditor’s role