Due to the prevalent use of information technology (IT) systems today, it is important that controls are in place. IT controls are specific IT processes designed to support a business process. IT Controls can be categorized as either general controls or application controls.
General Controls are those controls that are pervasive to all systems components, processes, and data for a given organization or systems environment. They include controls over such areas as the data center and network operations, systems software acquisition and maintenance, access security, and application system acquisition, development and maintenance.
Application controls are those controls that are appropriate for individual accounting subsystems, such as payroll or accounts payable. They relate to the processing of individual applications and help ensure that transactions occurred, are authorized, and are completely and accurately recorded, processed, and reported.
GTAG 2: Change and Patch Management Controls: Critical for Organizational Success
Posted with permission by The Institute of Internal Auditors, this guide addresses the areas that are impacted by changes to the IT infrastructure. It also provides guidance on how to communicate to the board the risks and controls identified and assist the organization to stay abreast of the continual changes in regulatory requirements. Learn More>>