Robust IT general controls ensure the proper development, implementation, and maintenance of all automated applications as well as the integrity of program and data files and computer operations. Using a methodology that is based on industry best practices and IT audit frameworks such as COBIT, we help clients develop sound IT control strategies in the following areas:
- IT Management – The controls to ensure that IT plans are aligned with business objectives, and that strategies, challenges, and risks are communicated with executive and business unit management.
- System Development and Implementation Controls – The controls over the development/acquisition and implementation of new systems and applications.
- Change Controls – The controls over the process for modifying existing systems and computer programs.
- Security Controls – The controls over logical and physical access to systems, applications, and data. It also includes the review of controls over the local area network (LAN) and wide area network (WAN) that ensure reliable and secure access to the IT environment.
- Computer Operations – The controls over management of IT operations, which include production processing, back-up and recovery, and incident management.
- Disaster Recovery Review – The plan for restoring processing and communications services in the event of an outage at a primary processing location.