IT Controls

Concept

Apply broadly: access controls, change management, computer operations, system development. Weak ITGCs undermine ALL application controls.

Key Point

Specific to individual apps: input controls (validation), processing controls (accuracy), output controls (completeness and distribution).

Example

If anyone can modify matching parameters without approval (weak change management), automated three-way matching cannot be relied upon.

Ready to test your knowledge?

Practice questions from this module to reinforce what you learned.