| |
IT General Controls (ITGC) Reviews
IT General Controls are the fundamental controls that apply to all applications, processes and data of an organisation. The objectives of ITGCs are to ensure the proper development, implementation and maintenance of applications, as well as the integrity of data.
Areas of focus used to perform ITGC reviews:
- IT Operations
- IT Governance
- Security
- Program Change Control
- Program Development
ITGC reviews can be performed for the following audiences:
- External audit: to enable the audit team to follow a controls-based approach
- Internal audit: to assist the internal audit team with the testing of IT controls
- Non-audit: to assist IT management to design, implement and monitor IT controls
Frameworks used:
- Control Objectives for Information and related Technology (COBIT)
- Information Technology Infrastructure Library (ITIL)
- Best Practice
The following technical reviews can be performed as part of an ITGC review:
- Operating System reviews (including Windows, Unix and Linux)
- Database Management System reviews (including Oracle, SQL Server, DB2 and Sybase)
|
