Internal Audit of IT Incident and Problem Management in a Bank

This thesis focuses on the internal IT audit of Incident and Problem Management processes in the banking sector. It analyzes the current state, evaluates processes, and proposes improvements. The theoretical part explains the fundamental concepts of auditing, the core processes of Incident and Problem Management, and the use of the Risk and Control Matrix (RACM). The practical part describes the audit implementation, current state analysis, assessment, and formulation of recommendations. The output is an audit report summarizing findings and recommendations for improving incident and problem management in compliance with regulatory requirements and standards.