Challenges to the implementation of information technology audit process in Iran's banking network

In this paper, the challenges to the implementation of the IT audit process in Iran's banking network have been identified through a number of case studies in four large Iranian banks. The data has been collected through conducting 20 interviews with experts in both IT management and IT audit fields of the mentioned credit institutions, and reviewing some of their internal documents. In this research, 20 cases of the main challenges and problems in the implementation of the IT audit process were identified. The findings of the research showed the existance of "Lack of independence and existence of common financial interests", "Inability to establishing communication between IT audit unit and IT unit", "Inappropriate organization and administrative structure of the entity under audit", "Lack of specialized information technology knowledge and necessary capabilities" information technology audit", "insufficient experience and inappropriate records of information technology auditors", "lack of valid training courses and lack of auditors having valid international certificates and documents of information technology audit" and "insufficient self-confidence of auditors", are among the main challenges to the implementation of the audit process that is considered information technology. The research also provide, while providing the background for future studies regarding the formulation of frameworks and models for the implementation of IT audits in banks for researchers, helps credit institutions to take effective measures to implement the IT audit process by identifying these challenges.