External ITGC Audits – An Internal Auditor's ... - IIA Dallas Chapter
External ITGC Audits – An Internal Auditor's ... - IIA Dallas Chapter
External ITGC Audits – An Internal Auditor's ... - IIA Dallas Chapter
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
<strong>ITGC</strong> <strong>External</strong> Scoping <strong>ITGC</strong> <strong>Audits</strong> <strong>–</strong> <strong>An</strong> <strong>Internal</strong> Auditor’s OpportunityApplication Control vs. an IT General Control?• Application controls- Think in terms of “does this directlyrelate to the input, processing oroutput of financial transactions”- Directly support CAVR(Completeness, Accuracy, Validity andRestricted Access), therebycontributing to comfort over financialstatement assertions• <strong>ITGC</strong>s- Activities that ensure the continuedeffective operation of applicationcontrols, automated accountingprocedures that depend on computerprocesses and manual controls thatuse application-generated information /reports- Some <strong>ITGC</strong>s may also serve asApplication Controls, e.g. passwordcontrols- <strong>ITGC</strong>s are pervasive, and thereforeoften do not directly support financialstatement assertionsPricewaterhouseCoopersPage 13