Information Technology General Controls (ITGCs) - In-Person

Information Technology controls are described in two categories: General Controls and Application Controls.

The CPE training seminar will cover ITGCs over the information technology (IT) environment, computer operations, access to programs and data, program development and program changes. IT application controls will be discussed concerning transaction processing controls.

The COBIT Framework (Control Objectives for Information Technology) is the most widely-used framework being used in SOX compliance efforts. This ITGC framework will be covered in detail.

Attendees will:

• Understand the similarities and differences between the ITIL and COBIT standards.

• Learn the compliance requirements of the Sarbanes-Oxley Act.

• Discuss how internal controls can manage risk and reduce fraud.

• Identify methods for improving the effectiveness of information process to effect the profitability of businesses

Section 1 - Introduction and Background

• Instructor's Perspective on IT Myths

• What is IT Governance?

Section 2 - Internal Control Frameworks

• What are "Internal Controls"?

• IT Risks

• Balancing Risks and Controls

• Internal Control Terminology

• IT Control "Frameworks"

Section 3 - Managing & Governing the IT Organization

• IT Organization Risk and Control

• IT Organization Relationships

• CoBIT Domain: Plan & Organize

Section 4 - Managing the System Life Cycle

• CobiT Domain: Acquire & Implement

• Managing the Systems Life Cycle

• System Development and Change Controls

• Change Control Board

• System Change and Development Controls - Risk & Control Objectives

• System Change and Development Controls - Internal Controls

Section 5 - Securing the Physical and Logical IT Environment

• CoBIT Domain: Deliver & Support

• Physical Security

• Logical Security

• Password Security

• Anti-Virus Configuration

• Security - Risk & Control Objectives

• Security - Internal Controls

Section 6 - - Managing Computer Operations

• CoBIT Domain: Deliver & Support

• Managing Computer Operations

• Computer Operations - Risk & Control Objectives

• Computer Operations - Internal Controls

Section 7 - Managing the Continuity of IT Services

• CoBIT Domain: Deliver & Support

• Managing the Continuity of IT Services

• IT Disaster Recovery Plan

Section 8 - Monitoring the Effectiveness of IT

• CoBIT Domain: Monitor and Evaluate

• Monitoring the Effectiveness of IT

Section 9 - IT Compliance with the Sarbanes-Oxley Act

• SOX Titles

• Mapping to PCAOB and CoBIT

• Systems for SOX Compliance

• Procedures for IT SOX Compliance

• Tests for IT SOX Compliance

Section 10 - Going Forward

• Regulatory Environment

• Long-Term Effects of SOX

• Roadmap to IT Compliance

• Dave's Lessons Learned

This CPE event "Information Technology General Controls (ITGCs) - In-Person" is designed to provide a comprehensive exploration of the best practices and considerations surrounding information technology general controls using the COBIT Framework as criteria. In using COBIT, an organizaiton can greatly impact the quality control in information technology. 

This event aims to equip professionals with the knowledge and insights necessary to ensure robust IT governance, risk management, and compliance within their organizations by using the right ITGCs.

It's fantastic to see your commitment to expanding your knowledge after the CPE event on Information Technology General Controls (ITGCs). Here are some authoritative sources, along with their web links, to further enhance your understanding:

• ISACA - IT Governance and Control Resources
  • ISACA offers a wealth of resources covering IT governance, control frameworks, and audit practices. By exploring their materials, you can gain valuable insights into ITGCs and related best practices, ensuring a comprehensive understanding of this critical area.
• NIST - Computer Security Resource Center
  • The National Institute of Standards and Technology (NIST) provides a comprehensive repository of computer security resources, including guidelines, publications, and standards related to information technology controls. This can serve as an invaluable reference for deepening your understanding of ITGCs.
• TechTarget - Information Technology Controls (IT Controls)
  • TechTarget offers insights into various aspects of information technology controls, providing practical explanations and industry insights that can enrich your comprehension of ITGCs and their significance in the business environment.
• COBIT - Information & Technology Governance Framework
  • COBIT offers a robust framework for information and technology governance, including resources related to IT controls, audit planning, and reporting. Exploring their framework can provide a structured approach to aligning IT activities with organizational objectives, including audit planning and reporting for ITGCs.

By engaging with these authoritative sources, you can further solidify your expertise in Information Technology General Controls, enabling you to navigate the complexities of IT governance and control with confidence and proficiency.