In an automated environment, General IT controls are policies and procedures that relate to many applications and support the effective functioning…

CA Intermediate · Auditing and Ethics · RTP · May 2025
In an automated environment, General IT controls are policies and procedures that relate to many applications and support the effective functioning of application controls. It includes access security as well as program change. What are the objectives and activities included in access security and program change?

Suggested Answer and Working Notes:

Access Security in Automated Environment: The objective of Access Security is to ensure that access to programs and data is authenticated and authorized to meet financial reporting objectives. Activities: Security Organization & ManagementSecurity Policies & ProceduresApplication SecurityData SecurityOperating System SecurityNetwork SecurityPhysical Security Program Change in Automated Environment: The objective of program change controls is to ensure that modified systems continue to meet financial reporting objectives. It includes activities such as change in management process, recording, managing and tracking change requests, making and testing changes etc.

Topics: Risk Assessment and Internal Control

Open in Interactive Practice Hub · Full Practice Hub · Chapter Weightage · More in this subject

Related Questions in this Topic