Understanding IT Controls
Instructor:
Mark Edmead
Product ID: 700379
Training Level: Basic
- Duration: 60 Min
As part of the Sarbanes-Oxley audit, there is a need to document and test controls for data centers, networks, operating systems, as well as client-server and web-server databases supporting those applications. Given the fact that the COBIT has 34 IT processes and 318 detailed control objectives, it is understandable that IT auditors are overwhelmed by the large number of controls. How do you determine what controls are important and which ones are not? Is the control a preventive, detective, or corrective control? What is the testing methodology? How do you determine if the control is effective?
The goal of this presentation is to address these questions and provide the IT auditor the information necessary to perform an effective audit of IT controls.
Learn how to determine if the control is a "key" control. Determine if the control prevents fraud, if it safeguards assets, if it is a manual or automated control, how to identify who performs the control, and if the control is designed in such a way that it mitigates the risk.
Areas Covered in the seminar:
- Understanding the IT audit process
- Selecting and using a control structure
- Understanding the various control frameworks (COBIT, COSO, ITIL)
- Identifying, evaluating, and improving IT controls
- How to collect data evidence
Who Will Benefit:
- IT Senior Management / IT management
- Internal IT audit
- IT compliance specialists
- Compliance officers
- Information security officers
Mark Edmead, MBA, CISSP, CISA, the Western Region IT Director for Control Solutions[www.controlsolutions.com] and has over 25 years of experience in computer systems architecture and information security. Mark has extensive knowledge of IT and Application audits, IT Governance, including FDIC, FFIEC, Sarbanes-Oxley, and GLBA compliance auditing. He also teaches audit and IT security courses for the Institute of Internal Auditors (IIA), Learning Tree International, and is an adjunct professor at Keller Graduate School of Management.
Refund Policy
Our refund policy is governed by individual products and services refund policy mentioned against each of offerings. However in absence of specific refund policy of an offering below refund policy will be effective.
Registrants may cancel up to two working days prior to the course start date and will receive a letter of credit to be used towards a future course up to one year from date of issuance. ComplianceOnline would process/provide refund if the Live Webinar has been cancelled. The attendee could choose between the recorded version of the webinar or refund for any cancelled webinar. Refunds will not be given to participants who do not show up for the webinar. On-Demand Recordings can be requested in exchange. Webinar may be cancelled due to lack of enrolment or unavoidable factors. Registrants will be notified 24hours in advance if a cancellation occurs. Substitutions can happen any time. On-Demand Recording purchases will not be refunded as it is available for immediate streaming. However if you are not able to view the webinar or you have any concern about the content of the webinar please contact us at below email or by call mentioning your feedback for resolution of the matter. We respect feedback/opinions of our customers which enables us to improve our products and services. To contact us please email [email protected] call +1-888-717-2436 (Toll Free).
