Mastering the IT Audit

Jyothi Ramaswamy is a seasoned risk, security, audit, and compliance professional with over 25 years of experience in the information security domain. Her career spans a distinguished tenure at Tata Consultancy Services Ltd., where she specialized in defining, implementing, reviewing, and auditing controls across complex IT environments. Currently operating as a freelance consultant, auditor, and trainer, Jyothi brings expertise in auditing diverse facets of organizational process management, particularly in the realms of information security and data privacy. Her consulting work is rooted in global standards, with a strong focus on ISO 27001, ISO 20000, ISO 9001, ISO 27701, and CIS controls.

Jyothi is a passionate educator and a certified trainer, known for delivering impactful sessions on cybersecurity, service and quality management, and regulations. Her audit experience spans enterprise networks, firewall-segregated infrastructures, and air-gapped systems. She has played key roles in ISO audits, SSAE assessments, third-party risk evaluations, and internal audits across various business functions. A committed member of professional bodies such as ISACA, IEEE, and GCA, Jyothi actively contributes to local chapters and has led numerous awareness programs on data privacy, cyber risk, and audit methodologies. Her credentials include ISO 27001:2022 Lead Auditor, CRISC – Certified in Risk and Information Systems Control, CISM – Certified Information Security Manager, CRISP – Certified Risk Professional, BS 7799 Lead Implementer, and APMG accredited ISACA Chapter Trainer for CISM and CRISC certifications.

Known for her collaborative spirit, sharp analytical skills, and problem-solving capabilities, Jyothi continues to contribute to the future of audit and security through her thought leadership and hands-on expertise.

1. IT Audit and Assurance Standards Statements
2. IT Audit Defined, Charter and Criteria
3. Planning, Scheduling, Reporting and Follow-ups for Audit
4. Types of Audits
5. IT Policies, Processes and SOPs
6. Risk Management and Impact Analysis
7. Procurement, Asset, Capacity, and Cloud Service Management
8. Access Management and Acceptable Usage Policy
9. Network, Server, Storage and Endpoint Management
10. Business Continuity and Disaster Recovery Planning
11. Organization Context and IT Services
12. Logging and Monitoring Services
13. KPIs and Status Reports
14. BCP Drills, Plans and Reports
15. Configuration and Change Management
16. IT Audit Frameworks ISO 20000 and ITIL
17. Organizations, People, Data and Technology Processes
18. Partners, Value Streams and Processes
19. Scope of Audit and Audit Plan
20. Review of Policy and Controls
21. Interviews, Site Visits and Technical Testing
22. Audit Findings and Actionable Audit Report
23. Evolving with the Audit Landscape

Jyothi Ramaswamy is a seasoned risk, security, audit, and compliance professional with over 25 years of experience in the information security domain. Her career spans a distinguished tenure at Tata Consultancy Services Ltd., where she specialized in defining, implementing, reviewing, and auditing controls across complex IT environments. Currently operating as a freelance consultant, auditor, and trainer, Jyothi brings expertise in auditing diverse facets of organizational process management, particularly in the realms of information security and data privacy. Her consulting work is rooted in global standards, with a strong focus on ISO 27001, ISO 20000, ISO 9001, ISO 27701, and CIS controls.

Jyothi is a passionate educator and a certified trainer, known for delivering impactful sessions on cybersecurity, service and quality management, and regulations. Her audit experience spans enterprise networks, firewall-segregated infrastructures, and air-gapped systems. She has played key roles in ISO audits, SSAE assessments, third-party risk evaluations, and internal audits across various business functions. A committed member of professional bodies such as ISACA, IEEE, and GCA, Jyothi actively contributes to local chapters and has led numerous awareness programs on data privacy, cyber risk, and audit methodologies. Her credentials include ISO 27001:2022 Lead Auditor, CRISC – Certified in Risk and Information Systems Control, CISM – Certified Information Security Manager, CRISP – Certified Risk Professional, BS 7799 Lead Implementer, and APMG accredited ISACA Chapter Trainer for CISM and CRISC certifications.

Known for her collaborative spirit, sharp analytical skills, and problem-solving capabilities, Jyothi continues to contribute to the future of audit and security through her thought leadership and hands-on expertise.