NOTES: IT Strategy Series: What are IT Controls, and do I have them?
Friday, March 9th, 2007I feel that our Roundtable session on Thursday, March 8th, 2007 was very informative for all in attendance at the ITA. Part-2 of this 3-part series introduced the IT Community to the changing roles of IT General Controls in compliment to Business Application Controls, Processes / Procedures and Entity-Level Policies - in regards to the SOX Audit on the Corporation and more specifically at the IT control level.
Open Discussion in the group was focused on:
- What is the definition of a CONTROL to the IT Auditor, to the SOX Auditor, the Corporate Culture?
- How can IT identify their Risks, how do they apply to IT Compliance, are they in alignment to the financial statement requirements of SOX?
- The best practices for initiating a Internal Control Framework Program to revise IT General Controls and bring them in line with the entity-level requirements and prepare for the Sox Audit.
- Where do you get started when you are a corporation, whose clients are starting to ask for Compliance Reassurance as they are under the SOX-Gun and you have no preparations to assist them in confidence of your software, infrastructure, etc.
- What is the COSO Cube and how does it affect IT?
- How do we leverage multiple IT Policy Frameworks to ensure IT Compliance?
To download a copy of the Presentation for your review, please use the following LINK: http://radiancompliance.org/ITA_20070308_IT_Controls.pdf - NOTE: This file is in PDF format of the slides, and about 3.4 MB in size.
I hope you can join us NEXT month for Part-3 of our IT Strategy Series: ASK THE EXPERTS. Our Panel of experts will be available to directly answer your compliance questions and concerns, and also share the varied experiences with the Roundtable Audience.
- Laurie Faith
Part-3: IT Strategy Series: Ask the Experts
DATE: 04/19/2007 TIME: 12:00 – 1:30 p.m.
The finale for this IT Strategy Series is to Ask The Experts. We will bring together experts from all facets of Compliance, including Financial, Information Management, Audit and Corporate. We will offer an open forum to submit questions before hand as well as on the spot information sharing. We will use feedback from the first two sessions to build a value based session. LEARN MORE…
Posted in Compliance Management, Roundtable Follow-Up | No Comments »
