IT Audit School: IT General Controls (ITGC)

All auditors need some familiarity with computer systems since virtually every type of audit will involve IT during the planning, fieldwork or reporting phases. This awareness includes understanding systems and related processes, risks, controls, how to document IT assets and activities, and ways to test inputs, processes, and outputs. Topics covered include logical security, administration and awareness, encryption, system development life cycle (SDLC), change management IT operations, vulnerability scanning and penetration testing, physical and environmental controls, business continuity planning (BCP) and disaster recovery planning (DRP). Who Should Attend Entry-level IT Auditors and Technologists looking for a foundational understanding of IT auditing.