A Teaching Experience on Information Systems Auditing
Software has become the keystone in many firms, regardless of the particular sector a company belongs to. Apart from bearing the greater part of the business value of the organisation, software makes it possible to leverage a radical digitalisation of many companies, even for those with a business model that is not IT-intensive. That makes it vital for firms have the capacity to establish mechanisms that enable information system quality to be assured. This has to be done if the systems themselves are to inspire trust and confidence. The auditing of the information systems gathers, groups and assesses evidence with which to judge whether an information system safe-guards assets, maintains the integrity of data, carries out the goals of the organisation effectively, and uses its resources efficiently. This paper presents a teaching experience carried out in the sphere of information system auditing, using a project-based approach. This strategy allows students to have an immersion experience in a fictitious company. They simulate a situation in which they are working for the firm’s IT department, establishing internal controls which they later audit. It has been shown that this approach enables students to acquire higher-level competences and skills, while also allowing them to assimilate the contents of the subject more fully.
KeywordsInformation system auditing Project-based learning Teaching experience
This work is part of the ECD project (PTQ-16-08504) (Torres Quevedo Programme of MINECO and part of the SEQUOIA (TIN2015-70259-C2-1-R) (funded by MINECO & FEDER). The work was also supported by the grant Dr. Ricardo Pérez-Castillo has received from JCCM.
- 1.Piattini, M., del Peso, E., del Peso, M.: Auditoría de Tecnologías y Sistemas de Información. RA-MA (2008)Google Scholar
- 2.ISO: The ISO Survey of Management System Standard Certifications 2016 (2017). https://isotc.iso.org/livelink/livelink?func=ll&objId=18808772&objAction=browse&viewType=1
- 3.Krajcik, J.S., Blumenfeld, P.C.: Project-based learning. In: Sawyer, R.K. (ed.) The Cambridge Handbook of the Learning Sciences, Cambridge, pp. 317–334 (2006)Google Scholar
- 4.Curricula Recommendations. Association for Computing Machinery (ACM) (2017). https://www.acm.org/education/curricula-recommendations
- 5.Curriculum Guidelines for Undergraduate Degree Programs in Information Systems. A volume of the Computing Curricula Series. Association for Computing Machinery (ACM) (2010)Google Scholar
- 6.Computer Science Curricula 2013. A volume of the Computing Curricula Series. Association for Computing Machinery (ACM) (2013)Google Scholar
- 7.Information Technology Curricula 2017. A volume of the Computing Curricula Series. Association for Computing Machinery (ACM) (2017)Google Scholar
- 8.Curriculum Guidelines for Undergraduate Degree Programs in Software Engineering. A volume of the Computing Curricula Series. Association for Computing Machinery (ACM) (2014)Google Scholar
- 9.Computer Engineering Curricula 2016. A volume of the Computing Curricula Series. Association for Computing Machinery (ACM) (2016)Google Scholar
- 10.Bourque, P., Fairley, R.E. (eds.): Guide to the Software Engineering Body of Knowledge, Version 3.0. IEEE Computer Society (2014)Google Scholar
- 11.ISACA: ISACA Model Curriculum for IS Audit and Control, 3rd edn. (2012)Google Scholar