<html><head></head><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yui_3_16_0_ym19_1_1461676899082_120373"><span id="yui_3_16_0_ym19_1_1461676899082_120499">+1 Kivuva,</span></div><div id="yui_3_16_0_ym19_1_1461676899082_120374"><span><br></span></div><div id="yui_3_16_0_ym19_1_1461676899082_120377" dir="ltr"><span id="yui_3_16_0_ym19_1_1461676899082_120376">There are some Business/Commerce Graduates/Accountants with CISA qualifications who can do some pretty good IS-Audits. But more often than not, these are those with an extra IT background e.g Diplomas in IT or what used to be the pre-univ IT course IMIS or IDPM during the late 90s/early 2000s.</span></div><div id="yui_3_16_0_ym19_1_1461676899082_120377" dir="ltr"><span><br></span></div><div id="yui_3_16_0_ym19_1_1461676899082_120377" dir="ltr">Strictly speaking, IS- Audits are quite complex EVEN for IT/CS graduates with CISA qualifications.</div><div id="yui_3_16_0_ym19_1_1461676899082_120377" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1461676899082_120377" dir="ltr">Bottom line is for each IS Auditor to acknowledge their weak areas and rope in the necessary competencies to complement their gaps. Something that requires honesty or humility. Most practicing IS auditors may not want to concede on this point (nor share the money) and subsequently go ahead and sign off IS-Audits report that are not value adding to the client.</div><div id="yui_3_16_0_ym19_1_1461676899082_120377" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1461676899082_120377" dir="ltr">I call this a 'Checklist-Audit' rather than an IS-Audit. Perhaps that is what CBK has been getting and accepting from the banks who know that CBK may not bother to dig deeper into these IS Audit reports.</div><div id="yui_3_16_0_ym19_1_1461676899082_120377" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1461676899082_120377" dir="ltr">walu.</div><div class="qtdSeparateBR" id="yui_3_16_0_ym19_1_1461676899082_120379"><br><br></div><div class="yahoo_quoted" id="yui_3_16_0_ym19_1_1461676899082_120527" style="display: block;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;" id="yui_3_16_0_ym19_1_1461676899082_120526"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;" id="yui_3_16_0_ym19_1_1461676899082_120525"> <div dir="ltr" id="yui_3_16_0_ym19_1_1461676899082_120524"> <font size="2" face="Arial" id="yui_3_16_0_ym19_1_1461676899082_120523"> <hr size="1" id="yui_3_16_0_ym19_1_1461676899082_120522"> <b><span style="font-weight:bold;">From:</span></b> Mwendwa Kivuva via kictanet <kictanet@lists.kictanet.or.ke><br> <b><span style="font-weight: bold;">To:</span></b> jwalu@yahoo.com <br><b><span style="font-weight: bold;">Cc:</span></b> Mwendwa Kivuva <Kivuva@transworldafrica.com>; KICTAnet ICT Policy Discussions <kictanet@lists.kictanet.or.ke><br> <b><span style="font-weight: bold;">Sent:</span></b> Wednesday, April 27, 2016 6:38 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: [kictanet] CBK lacks tech savvy team to survey local lenders<br> </font> </div> <div class="y_msg_container"><br><div id="yiv8636391256"><div dir="ltr">Dr Waudo, you are correct in that assertion, but just partially. Remember the IFMIS system "hacking" that happened a year ago? A very highly placed person made allegations that systems were compromised, etc. </div>
<div dir="ltr">Some years back, the Minister of Finance claimed of a "software bug" that inserted a typing error into his budget figures. There was also such reports from KNEC on "software bugs".</div>
<div dir="ltr">If you are an ICT expert, you would always be able to read in between the line. And that is where ICT AUDITORS need to curve their niche. Not just cross over auditors, but ICT pros.</div>
<div dir="ltr">Regards </div>
<div class="yiv8636391256gmail_quote">On Apr 27, 2016 6:40 PM, "waudo siganga" <<a rel="nofollow" ymailto="mailto:emailsignet@mailcan.com" target="_blank" href="mailto:emailsignet@mailcan.com">emailsignet@mailcan.com</a>> wrote:<br><blockquote class="yiv8636391256quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div><div style="font-family:Arial;font-size:medium;" dir="ltr"><div>
<div>
<div>Hi Kivuva,</div>
<div> </div>
<div>My understanding, although of course open to correction, is that IT Systems Auditors are essentially certified auditors with specialist training and skills to audit "through" and "around" IT systems. I would envisage someone with an auditing qualification backed up with a supplementary qualification is systems auditing but at the end of the day this person is an AUDITOR. In addition the training for today's certified auditors already includes systems audit as a subject. So the key skill is auditing, supplemented by systems knowledge. If this is the case then these professionals are already covered under statutory provisions.</div><font color="#888888">
<div> </div>
<div>Waudo </div></font><div class="yiv8636391256elided-text">
<div> </div>
<div>On Wed, Apr 27, 2016, at 04:25 PM, Mwendwa Kivuva via kictanet wrote:</div>
</div><blockquote type="cite"><div class="yiv8636391256elided-text">
<div dir="ltr">
<div>
<div>On 27 April 2016 at 16:12, Paul Roy <span dir="ltr"><<a rel="nofollow" ymailto="mailto:roykoikai@gmail.com" target="_blank" href="mailto:roykoikai@gmail.com">roykoikai@gmail.com</a>></span> wrote:
<blockquote style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div>Last - As long as I am a the helm of ISACA Kenya, I would like to open up our doors to the various experts within the industry who are willing to retrain IT auditors, IT Security professionals to consider ISACA as an ally. Let us work together, talk to me, come for one of the evening talks and let us grow and strengthen the profession. </div>
</blockquote>
</div>
<br>
Hi Paul,</div>
<div> </div>
<div>Thanks for the elaborate reply. </div>
<div> </div>
<div>My main concern is if it's legislated that people with valid IT Systems Audit certifications are the only ones doing IT audits for public interest organisations. The way only Lawyers can only do certain duties, or CPAs. Is this something feasible?</div>
<div> </div>
<div>Regards<br>
<div>
<div>______________________<br>
Mwendwa Kivuva, Nairobi, Kenya<br>
<a rel="nofollow" target="_blank" href="http://twitter.com/lordmwesh">twitter.com/lordmwesh</a><br>
<br>
</div>
</div>
</div>
</div>
</div><div class="yiv8636391256quoted-text"><div><u>_______________________________________________</u></div>
<div>kictanet mailing list</div>
<div><a rel="nofollow" ymailto="mailto:kictanet@lists.kictanet.or.ke" target="_blank" href="mailto:kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a></div>
<div><a rel="nofollow" target="_blank" href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a></div>
<div> </div>
<div>Unsubscribe or change your options at <a rel="nofollow" target="_blank" href="https://lists.kictanet.or.ke/mailman/options/kictanet/emailsignet%40mailcan.com">https://lists.kictanet.or.ke/mailman/options/kictanet/emailsignet%40mailcan.com</a></div>
<div> </div>
<div>The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.</div>
<div> </div>
<div>KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.</div>
</div></blockquote>
</div>
</div>
</div></div>
</blockquote></div></div><br>_______________________________________________<br>kictanet mailing list<br><a ymailto="mailto:kictanet@lists.kictanet.or.ke" href="mailto:kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a><br><a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br><br>Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/jwalu%40yahoo.com" target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/jwalu%40yahoo.com</a><br><br>The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br><br>KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br><br></div> </div> </div> </div></div></body></html>