Application (Web and Others) Auditing

This two-day class will focus on the presentation and discussion of general guidelines in performing an Information System Application Controls Review (ACR). The overall goal of this course will be to provide financial, operational, and entry-level IS/IT auditors with the key concepts and basic knowledge necessary to identify, test, and assess the reliability of application controls in mainframe, client/server, and/or multi-platform environments. The course will also provide the participants with a comprehensive methodology for examining application controls when reviewing business applications processed on mainframe, client/server, and/or multi-platform environments. The various control components of an automated business application will be presented and discussed, including: authorization, i nput, processing, output, security, and documentation. Application controls will be compared and contrasted with general controls in an automated environment. Participants will also learn how to identify and define a specific automated business application in highly integrated environments. At the conclusion of the second day of the course, participants will work through a generic application control review audit.

• Types and Definitions of IT Controls
• Audit Standards
•  Performing an Application Controls Review
• Components and Controls in an Automated Business Application

Learning Level: Intermediate

Duration: 3 day(s)-