A focused course on Sarbanes-Oxley IT compliance work: testing IT general controls (ITGCs) that support the accuracy of financial reporting, and documenting that testing to the standard external auditors and regulators expect.

Modules

SOX Fundamentals for IT Auditors

Lessons

• Why SOX Created a Role for IT Auditors Preview
• The Financial Reporting Systems in Scope
• The Relationship Between Internal and External Auditors

IT General Controls (ITGCs) Overview

Lessons

• The Four Pillars of ITGCs
• Program Development and Change Controls
• Computer Operations and Job Scheduling

Access Controls and Change Management

Lessons

• Testing User Access Provisioning
• User Access Reviews and Segregation of Duties
• Terminations and Access Removal

Financial Reporting Systems and Interfaces

Lessons

• Understanding the ERP and General Ledger
• System Interfaces and Data Integrity
• Spreadsheets and End-User Computing Risk

Testing Methodology and Evidence

Lessons

• Designing an ITGC Test Plan
• Sampling Methodology for SOX Testing
• Evidence Standards for External Reliance

Deficiency Evaluation and Remediation

Lessons

• Classifying Control Deficiencies
• Root Cause Analysis for ITGC Failures
• Remediation Testing and Year-End Reporting