IT-Audit of the Automated Processes Involved in the Formation of Financial Statements in the Telecom Sector Company

The paper describes the IT audit procedure for the processes involved in the formation of financial statements of a telecommunications company. The purpose of the audit is to reduce the risks arising from the use of IT, which may distort the financial performance of the company. Risks can come from intentional or unintentional actions of the organization's employees, as well as external cyber attacks. The theoretical aspect of the work covers the study of the concept of IT audit, its fundamental frameworks and standards, such as ISO, COBIT and NIST. Based on this, as well as relevant experience in conducting IT audit projects, a testing methodology will be developed. Through interviews with key representatives of the audited Company, the business processes in which financial reporting is generated and the organization’s IT environment will be determined, risks and corresponding IT controls will be identified. Using the developed methodology, general and applied IT controls will be tested. The results obtained will be used to develop recommendations to reduce the risks of information security violations. This will allow the Company to more effectively manage risks and position itself more professionally and sustainably in the market compared to its competitors.