º¸Áõ(assurance)À̶õ, 2 ÀÌ»óÀÇ ´ç»çÀÚµé °£¿¡ ¼Ò¸í °ü°è¿¡ µû¶ó¼, IT °¨»ç ¹× º¸Áõ Àü¹®°¡°¡ ¼Ò¸í ´ç»çÀÚ¿¡ Ã¥ÀÓÀÌ ÀÖ´Â ÁÖÁ¦¿¡ ´ëÇؼ ¾î¶°ÇÑ °á·ÐÀ» ´ãÀº ¼º¹®ÀÇ Àü´Þ ¹®¼¸¦ ¹ßÇàÇϱâ À§ÇØ ¾à¼ÓÇÏ´Â °ÍÀ» ÀǹÌÇÑ´Ù.
º¸ÁõÀº µ¶ÀÚ È¤Àº »ç¿ëÀÚ¿¡°Ô ÇØ´ç ÁÖÁ¦¿¡ °üÇؼ ¾î¶°ÇÑ º¸Áõ ¶Ç´Â ¾È½É ¼öÁØÀ¸·Î º¸°í¼¸¦ Á¦°øÇϱâ À§ÇÏ¿© ¼³°èµÈ ¿©·¯ °ü·Ã È°µ¿µéÀ» ÁöĪÇÑ´Ù. ¿¹¸¦ µé¾î, º¸Áõ °è¾à ¾÷¹«´Â ¼ö°¨ À繫Á¦Ç¥, ÅëÁ¦ÀÇ °ËÅä, Çʼö Ç¥ÁØ ¹× ½Ç¹«ÀÇ Áؼö, ±×¸®°í ÇùÁ¤, ¶óÀ̼¾½º, ¹ý·ü ¹× ±ÔÁ¦ÀÇ Áؼö µîÀÇ Áö¿øÀ» Æ÷ÇÔÇÒ ¼ö ÀÖ´Ù.
¡®Assurance¡¯ in the context of this publication means that, pursuant to an accountable relationship between two or more parties, an IT audit and assurance professional is engaged to issue a written communication expressing a conclusion about the subject matters for which the accountable party is responsible. Assurance refers to a number of related activities designed to provide the reader or user of the report with a level of assurance or comfort over the subject matter. For example, assurance engagements could include support for audited financial statements, reviews of controls,
compliance with required standards and practices, and compliance with agreements, licenses, legislation and regulations.
-IT Assurnace Framework(ITAF) Áß¿¡¼,