IT controls - General vs Application Controls

[@143fromRose]

This video couldn’t have come at a better time! Currently studying this topic this week! Thank you so much!!

[@amandalovestoaudit]

Great! Happy studies 😊

[@Pmyby]

Normal it general controls are categorised into domains: 1. Access: to application, to servers, to data centers 2. Changes in Inscope Application and related infrastructure: if there any code changes performed in the application, or if there any such changes in the application which changes the functioning of the application (like changing the tax rate on any product), patches applied in the application, security patches made on the servers, 3. Security: testing of Firewall, antivirus elements 4. Other IT Operations: Scheduled jobs, interfaces, Backups, Incidents

[@amandalovestoaudit]

Hi Parminder - thanks for sharing this :)

[@abdulwahabalhaji8662]

Thank you so much for this video! I'm interviewing for IT Risk Consultant this week and this clarifies things for me a lot.

[@thres34]

One year on, did you get the job?

[@abdulwahabalhaji8662]

I DIIIIIID and I’m a senior now!!!!

[@funnyclips4045]

@@abdulwahabalhaji8662 hmdl 🤲🏽

[@mrmindstorms]

Hos do you like it? :) I have my last interview tomorrow, but Reddit says it’s really boring and few exit opportunities

[@xosharonnoelle7]

Recently found your channel and have my uni audit exam next week! Thank you so much for these videos, they are so helpful and well made!

[@raymondokello1319]

Amanda your explanation is awesome 💯

[@snb1143]

Thanks I really loved that video, I was really struggling with general v application controls, now all is clear.

[@amandalovestoaudit]

Great to hear!

[@Tony-bc1rr]

This is such an fantastic video with clear explanation and examples. Absolutely loving it! Keep it up Amanda will follow the channel!

[@amandalovestoaudit]

Thanks Tony!

[@MrKwabenajames]

Amanda, it was amazing. Great job

[@amandalovestoaudit]

Thank you Kwabena - good luck in your studies :)

[@thabangmahlangu1484]

Thank you so much, you just contributed to my exam success.

[@amandalovestoaudit]

Good luck in your exams Thabang!

[@abdullahaljalil5218]

This is my second presentation today Lots of appreciations for the these valuable videos 👍

[@nosisagagai262]

Great video Amanda☺

[@tejumadeajoke9674]

very insightful and easily illustrated

[@amandalovestoaudit]

Thanks!

[@sahilkhan2470]

Thank you, this is very clear. Even my 100 euro's of textbooks can't explain like you do. gr from Amsterdam

[@mustafa7amin7]

👍Thank You very much for great video and answering my question. Your way of explaining is great to understand easily within shortest time 👍

[@amandalovestoaudit]

You’re welcome Mustafa!

[@shaistahsayedally9364]

Hi Amanda. This video is really good. Can you break this down further into the 6 general controls (control environ, system development,access control, continuity, system software and doc)? Enjoy your style of lecturing. Everything fits into perspective with the videos you do.

[@neginitin8255]

Beautifully explained in simple language

[@ttjordan81]

Ha, when you got to the LMS part, literally a relational DB scheme I created years ago... 😍

[@amandalovestoaudit]

They haven't changed!

[@sunubishwokarma1002]

Great explanation, thank you so much.

[@DollFacePeter]

“Dr Amanda” That flexxxxxxx

[@amandalovestoaudit]

I *think* that’s a compliment - thanks 😊

[@Phsoco]

I understand this video is old, however, is it correct to assume applications like email filters/blockers that are add-ons for other applications are considered General IT controls as opposed to IT Application Controls? I'm assuming it's General because it's not programmed into the application, but rather an add-on.

[@staceturner3442]

Thank you, this was very informative!!!

[@amandalovestoaudit]

Thanks Stace!

[@EvaSlash]

Do you have any tips for an IT Audit SOX interview? How to impress and stand out?

[@amandalovestoaudit]

Hi Gib Gob - do you mean going for a job in IT Audit/SOX? Or do you mean interviewing clients? I presume it is the latter - know your potential employer: * what sort of companies do they audit? * check out the SOX 404 reports on some of those companies - what are common issues that fall under the IT category? (rather than the manual category) * how would you go about detecting those sorts of major deficiencies And the final one - make sure you have at least 1 question for your employer that shows you want to know whether you fit in at their organisation - that may be about clients, location, travel, advancement, culture, diversity & inclusion. Good luck!

[@busolaoshideko8680]

@@amandalovestoaudit Insightful. Thank you

[@marwanmilan811]

Would you clarify the role of a group financial controller

[@JoMmEKiSs]

So wonderful thank you so much. You are great teacher

[@amandalovestoaudit]

You’re welcome Jome! 😊

[@ntcuong01ct1]

Dear Friends, I have a question about internal control: 1/ I think internal control (IC) are activities that identify risks and frauds occurring in business processes and financial reports. After the IC (internal control) department detects risks, it will propose to management levels or the Board of Directors to identify risks and handle them. Question: Am I understanding this correctly?, I hope you can answer and add more. Thank you.

[@paulramalepe]

Thank you so much... but I want to understand the ICT controls in Revenue and receipts cycle!!! It confuses me big time.

[@yositasunintaboon4455]

thank you so much for sharing this helpful video

[@amandalovestoaudit]

You're welcome Yosita!

[@ceaseuno1]

Thank you for the video. Do you have a video on sampling IT general controls?

[@amandalovestoaudit]

Hi - not yet - when sampling, the key is going to be sampling over the entire year

[@JAFFER3657]

Thank You for this video and also to the person who requested this video, It helped a lot.

[@amandalovestoaudit]

You're welcome Syed!

[@amitsalekar1433]

How can you relate the IT controls with IT Audits

[@mikewang8479]

您的英语讲得真好！

[@amandalovestoaudit]

Hi Mike - unfortunately I can’t read Chinese characters!

[@RS-ws5lh]

Hiii ur videos are superb, will u do a video on socq type2 audit

[@AwesomeIcer9000]

My textbook also mentions ‘user controls’, what is that exactly?

[@amandalovestoaudit]

User controls are those related to guiding user behaviour. Does it refer to computer end user controls? www.prweb.com/releases/2004/12/prweb185286.htm

[@poonampatil7800]

Thanks for clarification 🙏🏻

[@madhavkikahani]

Hey Amanda..your way of teaching is just wow...can you please upload video on HIPPA with complete understanding from zero to hero

[@amandalovestoaudit]

Hey - I don't know much about HIPPA (if you mean the healthcare privacy law) - sorry!

[@nagendrabijur]

Batch Jobs scheduled in an application, do they come under ITGC's or ITAC? (add/modify/delete critical scheduled jobs or interfaces between in-scope SOX system)

[@amandalovestoaudit]

Batch jobs within an application would be an Application Control ☺️

[@nagendrabijur]

@@amandalovestoaudit thanks for the clarification and Quick reply!😁

[@mrbeansprout562]

Can I ask some question? for access into organization network (Internal Network) >> ITGC but access into each application (e.g. internal application) and some time we use different credential form internal network can we call IT application control? So,if focus in application >> call Application Control right?

[@amandalovestoaudit]

Yes - focus within an application is an Application Control

[@fadihijazi1658]

you're awesome, thanks!

[@amandalovestoaudit]

Thank you so much Fadi 🙏☺️

[@damibabz4100]

Thanks, this is great

[@peterc.7841]

is this about Sarbanes Oxley?

[@amandalovestoaudit]

Hi Peter - not specifically. SOX does require you to report on any material deficiencies in internal controls - but this video is just about the difference between 2 types of IT controls - application and general. SOX requires you to look at all controls - manual (done by people) and IT

[@rousyamigo4278]

Dear Amanda how to check for back up ?

[@amandalovestoaudit]

Asking about the process, see if they’ve done any restorations from backups (usually this process needs to be documented and signed off by mgmt). You can’t usually physically/actually test the backup

[@rousyamigo4278]

@@amandalovestoaudit Thank u so much

[@arvindiyer4578]

Can you explain , what is configurable and Non Configurable Controls and explain with an example

[@amandalovestoaudit]

Hi Arvind - the teacher in me always asks a question first. What do you think the difference is? Give it a go and then I’ll happily provide some guidance based on your response ☺️

[@thekingoftheboxleton]

How do you manage not to say "um" when you are speaking?! Great job.

[@amandalovestoaudit]

Lots of practice - but I still do it occassionally! Trying to speak too fast also can cause ums. I think in this video I wrote a script and used my teleprompter!

[@thekingoftheboxleton]

@@amandalovestoaudit thanks for your content. I am just at the bottom rung of aca doing assurance and your vids proper help!

[@TheVivacious01]

pause instead of saying um

[@ibnal-yemen2063]

Very nice. 🌹

[@amandalovestoaudit]

Thank you! 😊

[@nhlovukophilosophy6975]

Greetings,can you please highlight which aspects to dwell much on when coming to computer auditing?

[@amandalovestoaudit]

Hi Edward - I’m unsure of your question. Do you mean when you are studying computer audit? Or when you are auditing a client’s systems?

[@nhlovukophilosophy6975]

@@amandalovestoaudit on both aspects, and how to go about the subsequent events as an Auditor?

[@amandalovestoaudit]

Hi Edward - auditing computers are like auditing any other process - understand the internal controls, identify the control activities, test the controls for effectiveness. As for subsequent events - I have 3 videos on this topic A strategy for answering subsequent event questions kzbin.info/www/bejne/n2LRi2ahZapngLM Subsequent events - some worked examples kzbin.info/www/bejne/pqeQq5ikds-HfbM Interpreting the Auditing Standard on SUBSEQUENT EVENTS ISA/ASA560 kzbin.info/www/bejne/fl61ZH-tfdyXjMk

[@karabondlovu6528]

Hello I'm asking for an assistance relating to General control vs Application control

[@amandalovestoaudit]

What sort of assistance?

[@karabondlovu6528]

I was trying to send the document but I couldn't I was asking for you email so that I can share the document

[@funnyclips4045]

@@karabondlovu6528 I am sorry, but that seems a bit shady. Just ask her the question instead of sending documents?

[@jusappia1580]

Thank you

[@amandalovestoaudit]

You're welcome Jus - thank you for watching :)

[@viviannevi7164]

Kindly do a video on cloud accounting and/or share a link where one can get more insight on what it is and how it works, pros and cons etc. Thank you in advance.

[@amandalovestoaudit]

Hey Vivianne Definitely check out Heather Smith for everything cloud accounting. She has a great website and be sure to sign up for her newsletter kzbin.info

[@jessblack9110]

I need to get some more info from you are you free to go for 30 minutes

[@yuqianzhao6567]

really helpful...thanks a lot！！！！

[@amandalovestoaudit]

Thanks Yuqian! Don’t forget that I have a full study guide of videos on my website - amandalovestoaudit.com/learning-resources/audit-study-guide/

[@berosar]

Nice

[@pearlczworld]

Amanda, what is a BSO test?

[@amandalovestoaudit]

Hi - I don’t remember mentioning that in the video ... or do you mean generally?

[@pearlczworld]

Amanda, thanks for responding. I had someone at work ask me this and dont know what they were referring to. what kind of test is it?

[@amandalovestoaudit]

Ok - it is something I’ve actually never heard of before! I will ask around and see if I can help - it might be something specific to your audit firms

[@cuss1874]

i need help for my task:(

[@jmn1238]

I would think the app controls are more interface controls rather than SOD

[@amandalovestoaudit]

There are many that are likely to be both

[@vuyitumelomabunda8293]

I salute🤙

[@80dakka]

Hello , please if u can help as I am new IS Auditor need some Authorised SW's of the below: Transaction logging  Query tools  Statistics and data analysis (CAAT)  Database management system (DBMS)  Data warehouses, data marts, data mining  AI  Embedded audit modules (EAM)  Neural network technology  Standards such as Extensible Business Reporting Language (XBRL)

[@amandalovestoaudit]

Hi Bo - I’d check out Auditnet.org - this is a great resource for practitioners.

[@davidesintini6708]

Niceeeee!!! What about making a video where you explain the differences between an audit of private and public company? Keep up the work!!

[@Tokollo_]

🤣im in my final year and I still have to remind myself now and then about the difference between these 2.The line that differentiates them is too thin its easy to mix them up

[@МаксимКамелевский-ъ8х]

「上記のギフトのいずれかを選択できます」、

[@buyiemsane3446]

1 2 3

[@dennisafariogun1658]

1

[@nitishdash4850]

Best at 1.25x

[@Kris-bb4oy]

crykey mate

[@russh115]

Sorry Amanda, you explained ITGCs horribly.

[@sandysandy9275]

Thank you