IT Controls

Due to the prevalent use of information technology (IT) systems today, it is important that controls are in place. IT controls are specific IT processes designed to support a business process. IT Controls can be categorized as either general controls or application controls. General Controls are those controls that are pervasive to all systems components, processes, and data for a given organization or systems environment. They include controls over such areas as the data center and network operations, systems software acquisition and maintenance, access security, and application system acquisition, development and maintenance. Application controls are those controls that are appropriate for individual accounting subsystems, such as payroll or accounts payable. They relate to the processing of individual applications and help ensure that transactions occurred, are authorized, and are completely and accurately recorded, processed, and reported.

GTAG 1: Information Technology Controls
Posted with permission by The Institute of Internal Auditors, this guide covers technology topics, issues, and audit concerns. Additionally, it delves into issues which include management, security, control, assurance and risk management. Learn More>>